Run STRIDE threat modeling and SAST vulnerability scans on codebases.
npx skills add https://github.com/jlaws/dotfiles --skill cmd-security-audit
Please help me install this Agent Skill. Skill: cmd-security-audit Source: https://github.com/jlaws/dotfiles/tree/main/.agents/skills/cmd-security-audit Command: npx skills add https://github.com/jlaws/dotfiles --skill cmd-security-audit
The security audit skill helps teams systematically identify threats, vulnerabilities, and compliance gaps in codebases, enabling proactive risk management.
Run a full security threat model and vulnerability scan against the target project.
High-intent search queries and answers about installing and using this skill.
A STRIDE threat model is performed by analyzing project boundaries and components to systematically identify security threats across your codebase. This skill facilitates the process and generates an actionable remediation plan during code reviews.
Yes, you can map code vulnerabilities to compliance frameworks like PCI-DSS and SOC2. The skill provides compliance control mapping to identify gaps and ensure your codebase meets regulatory requirements across projects and languages.
SAST pattern mapping identifies common vulnerability classes in source code by matching known security flaws against your codebase. It is applied during code reviews to detect vulnerabilities and generate an actionable remediation plan.
Yes, this security audit supports multiple programming languages. It facilitates threat modeling, SAST pattern checks, and compliance mapping across projects and languages with configurable scope and guardrails.
You can configure the scope of a vulnerability scan using the skill's built-in guardrails. This allows you to target specific project boundaries and components during threat modeling and SAST pattern checks.
balic-AI-ML-R-D-ResourcesMap architecture, trust boundaries, and data flows for security audit scoping.
mtsatryanIdentify and remediate security vulnerabilities and compliance gaps across applications, infrastructure, and code.
riparinoEmbed secure coding guidance into development workflows from design to deployment.
florianbuetowScan code and dependencies for vulnerabilities mapped to CWEs.
