skills.rest
johngrandson
johngrandsonCOMMUNITY
Explore all skills by this author →
Website𝕏@johngrandsoonGitHub

ck:security

Audit codebases for security vulnerabilities using STRIDE and OWASP methodologies.

Updated Aug 23, 2026
Search Tags:#automation#security#vulnerability#owasp#audit#stride
One-click install
npx skills add https://github.com/johngrandson/orkestry --skill ck-security-johngrandson
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: ck:security
Source: https://github.com/johngrandson/orkestry/tree/main/.claude/skills/ck-security
Command: npx skills add https://github.com/johngrandson/orkestry --skill ck-security-johngrandson

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Security audits traditionally require manual, time-consuming reviews, and can miss subtle vulnerabilities. ck:security automates STRIDE + OWASP based security assessments to identify vulnerabilities, misconfigurations, and sensitive data exposures.

Core Features & Use Cases

  • Structured STRIDE analysis covering S, T, R, I, D, E with actionable findings.
  • OWASP Top 10 mapping and secret/file pattern detection across code and dependencies.
  • Iterative fixes using the ck:autoresearch guard pattern to drive remediation and ensure safety.

Quick Start

Audit a given scope to generate a findings report and optionally apply automated fixes with iterative guardrails.

Frequently Asked Questions about ck:security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate STRIDE security audits for my codebase?▼

Automate STRIDE security audits by applying a structured workflow that analyzes codebases across Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege categories to flag actionable vulnerabilities.

Can I map codebase vulnerabilities to the OWASP Top 10 automatically?▼

You can map codebase vulnerabilities to the OWASP Top 10 automatically by scanning code and dependencies to detect security misconfigurations, sensitive data exposures, and secret patterns.

How does automated security auditing handle iterative vulnerability fixes?▼

Automated security auditing handles iterative fixes using the ck:autoresearch guard pattern to drive remediation, apply changes safely, and compile a comprehensive findings report categorized by severity.

Does automated security auditing work across multiple programming languages?▼

Automated security auditing works across multiple programming languages and project types, supporting pre-release security reviews and ongoing governance without requiring language-specific configurations.

What is the best way to generate a severity report for OWASP vulnerabilities?▼

The best way to generate a severity report for OWASP vulnerabilities is running an automated audit that flags findings by severity and compiles them into a structured report for remediation tracking.

Why use STRIDE methodology for pre-release code security reviews?▼

Use STRIDE methodology for pre-release code security reviews to systematically identify subtle vulnerabilities and security flaws that manual time-consuming reviews often miss across complex software projects.

Related Skills

Explore More Software Engineering Skills→
lengo0951lengo0951

ck-security

Automate security audits and vulnerability fixes using STRIDE and OWASP methodologies.

Community
Advanced
dapperdiversdapperdivers
1

report-generator

Generate structured markdown penetration test reports from JSON security scan findings.

Community
Intermediate
tutran27tutran27

vc-autoresearch

Automate iterative research loops to identify gaps, generate reports, and apply fixes.

Community
Advanced
RIMTHAN-LABRIMTHAN-LAB
1

owasp-mobile-security-checker

Analyze Flutter applications for OWASP Mobile Top 10 vulnerabilities.

Official
Intermediate