ck:security

Identify security vulnerabilities in code using STRIDE and OWASP standards.

1|Updated Jun 16, 2026
One-click install
npx skills add https://github.com/TNHoang2708/Gym_Ver2 --skill ck-security-tnhoang2708
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: ck:security
Source: https://github.com/TNHoang2708/Gym_Ver2/tree/main/.claude/skills/ck-security
Command: npx skills add https://github.com/TNHoang2708/Gym_Ver2 --skill ck-security-tnhoang2708

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires npm audit, pip-audit, govulncheck, bundle audit, mvn dependency-check, cargo audit, and includes scripts (resource) and references (resource) components.

What problem does it solve?

Identifies and resolves security vulnerabilities in your codebase, helping maintain code integrity and compliance.

Core Features & Use Cases

  • Security Audit: Conducts a thorough security audit using STRIDE and OWASP methodologies.
  • Automated Fixing: Offers automated fixes for common security issues.
  • Customization: Supports scanning of specific code scopes and iterative fix attempts.

Quick Start

Run a full codebase security audit with automated fixes: /ck:security full --fix

Frequently Asked Questions about ck:security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a STRIDE security audit on my codebase?

A STRIDE security audit identifies vulnerabilities in your codebase using STRIDE and OWASP methodologies. You can run a full scan to detect security flaws and maintain code integrity through continuous checks.

Can I automatically fix vulnerabilities found during a security audit?

Yes, you can automatically fix vulnerabilities found during a security audit. The automated fixing feature resolves common security issues and supports iterative scanning to ensure fixes are properly applied.

Does vulnerability scanning work with npm, pip, and cargo dependencies?

Vulnerability scanning works with npm, pip, and cargo dependencies, alongside go, bundle, and mvn. It integrates these dependency checks to identify security vulnerabilities across different package managers.

What is the best way to maintain continuous code integrity and compliance?

The best way to maintain continuous code integrity and compliance is conducting thorough security audits using STRIDE and OWASP standards. This identifies and resolves vulnerabilities, supporting iterative scans and automated fixes.

How do I scan a specific scope of my code for security issues?

You can scan a specific scope of your code for security issues by customizing the audit parameters. This allows targeted vulnerability scanning and iterative fix attempts on designated code segments rather than the full codebase.