skills.rest
pipemind-com
pipemind-comOFFICIAL
Explore all skills by this author →
WebsiteGitHub

compiling-security-agent

Generate a stack-specific security agent with PoC tests for code repositories.

Updated Jan 23, 2026
Search Tags:#security#owasp#red-team#stack-detection#vulnerability-scanning#agent-generator#poc-tests
One-click install
npx skills add https://github.com/pipemind-com/pipemind-marketplace --skill compiling-security-agent
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: compiling-security-agent
Source: https://github.com/pipemind-com/pipemind-marketplace/tree/main/plugins/spec-driven-development/skills/compiling-security-agent
Command: npx skills add https://github.com/pipemind-com/pipemind-marketplace --skill compiling-security-agent

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Creates a compact, adversarial security auditor tailored to a project's detected tech stack to rapidly identify the highest-risk vulnerabilities and provide actionable proof-of-concept tests, avoiding long generic checklists.

Core Features & Use Cases

  • Stack detection: Auto-detects Node, Python, Rust, Go and common auth/database patterns from CLAUDE.md and repo files.
  • Targeted vulnerability matrix: Maps OWASP Top 10 and framework-specific issues to the detected stack and optional compliance goals (SOC2, PCI-DSS, HIPAA).
  • Agent generation with PoC: Produces a 50-100 line .claude/agents/security.md agent including scanner commands, top 5 stack-specific checks, and 2-3 attack tests with PoC commands.
  • Use Case: Add an adversarial red-team agent to CI or developer workflows to quickly surface critical auth, injection, and data-exposure issues before release.

Quick Start

Create a security agent for this repository that detects the tech stack, runs appropriate scanners, and writes .claude/agents/security.md with the top five checks and PoC tests.

Frequently Asked Questions about compiling-security-agent

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I generate an adversarial security agent for my code repository?▼

To generate an adversarial security agent, apply this Skill to a code repository with a CLAUDE.md file. It auto-detects the tech stack, maps OWASP Top 10 vulnerabilities, and writes a focused security auditor agent to .claude/agents/security.md.

Does the security agent generation work with Python and Node stacks?▼

Yes, the security agent generation supports common stacks including Node, Python, Rust, and Go. It detects stack-specific auth and database patterns from repository files to tailor vulnerability checks and proof-of-concept tests accordingly.

How does stack detection work for creating targeted vulnerability checks?▼

Stack detection works by analyzing the repository's CLAUDE.md and source files to identify frameworks, auth patterns, and databases. This detected stack is then mapped to OWASP Top 10 issues and compliance goals to produce focused vulnerability checks.

Can I use the generated security agent for SOC2 or PCI-DSS compliance audits?▼

Yes, you can use the generated security agent for SOC2, PCI-DSS, and HIPAA compliance audits. The agent tailors its vulnerability matrix and stack-specific checks to align with these optional compliance goals during generation.

Do I need a CLAUDE.md file to run the security agent generator?▼

Yes, you need a CLAUDE.md file present in your repository to run the security agent generator. The Skill requires this file to perform stack detection, validate YAML frontmatter, and generate the tailored .claude/agents/security.md output.

What is included in the generated security.md agent file?▼

The generated security.md file includes scanner commands, the top five stack-specific vulnerability checks, and two to three attack tests with proof-of-concept commands. This compact 50-100 line agent is designed for CI or developer workflows.

Related Skills

Explore More Software Engineering Skills→
lupin4lupin4

claude-md-enhancer

Analyze, generate, and enhance CLAUDE.md files with YAML frontmatter validation.

Community
Advanced
EntroVyxEntroVyx
3

cross-attack-chains

Chain medium and high-severity vulnerabilities into critical-impact attack paths.

Community
Advanced
peancharoenpeancharoen

speckit.checker

Run static analysis tools to detect linting, type, and security issues across source code.

Community
Advanced
PurpleAILABPurpleAILAB
60

vulnerability-base

Standardize smart contract vulnerability reporting with severity classification and quality checklists.

Official
Intermediate