Perform STRIDE and OWASP security audits and output severity-ranked vulnerability reports.
npx skills add https://github.com/jangtrinh/demo-Lam --skill ck-security-jangtrinh
Please help me install this Agent Skill. Skill: ck:security Source: https://github.com/jangtrinh/demo-Lam/tree/main/.claude/skills/ck-security Command: npx skills add https://github.com/jangtrinh/demo-Lam --skill ck-security-jangtrinh
It helps you identify security weaknesses and risky patterns in a codebase, rank them by severity, and optionally apply targeted fixes safely and iteratively.
--fix is enabled, applies fixes iteratively using the ck:autoresearch guard pattern and stops early if a guard fails.Run the security audit on your code by using this instruction: /ck:security full.
High-intent search queries and answers about installing and using this skill.
Run a STRIDE security audit by executing `/ck:security full` to systematically analyze threats across spoofing, tampering, repudiation, information disclosure, denial of service, and elevation of privilege, mapping results to OWASP Top 10 categories.
Yes, you can automatically fix vulnerabilities by enabling the `--fix` flag, which applies targeted fixes iteratively using a guard pattern and stops early if a guard fails to ensure safe modifications.
Yes, the security audit includes dependency and secret detection by running a stack-appropriate dependency audit and scanning for hardcoded secrets using regex patterns across your source code.
The best way to identify authentication and injection vulnerabilities is running an automated security audit that scans source code, ranks findings by severity, and provides structured file and line context with fix recommendations.
The vulnerability triage report structures findings by severity ranking, providing specific file and line context for each identified issue alongside actionable fix recommendations for immediate remediation.
hotriluanIdentify and prioritize security findings using STRIDE and OWASP methodologies.
outfitter-devAudit codebases for security vulnerabilities and misconfigurations using OWASP and CWE mappings.
borgheiAutomate scalable data pipeline design and warehousing with Spark, Airflow, and Snowflake.
tbartel74Automate OWASP Top 10 checks, secret detection, and dependency audits for Vigil Guard services.