skills.rest
iampawan
iampawanCOMMUNITY
Explore all skills by this author →
Website𝕏@imthepkGitHub

critic-security

Detect security and privacy vulnerabilities in contract content.

3|Updated May 20, 2026
Search Tags:#security#compliance#contract analysis#vulnerability detection#privacy
One-click install
npx skills add https://github.com/iampawan/Manifest --skill critic-security
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: critic-security
Source: https://github.com/iampawan/Manifest/tree/main/skills/critic-security
Command: npx skills add https://github.com/iampawan/Manifest --skill critic-security

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automates the scanning of contracts for security and privacy gaps, helping ensure compliance and reducing potential risks.

Core Features & Use Cases

  • Security Gap Scanning: Identifies missing security measures in contracts, such as authentication, authorization, and data handling.
  • Privacy Analysis: Checks for the proper handling of Personally Identifiable Information (PII) and sensitive data.
  • Use Case: Before deploying a new feature, use this Skill to verify that the contract adheres to security best practices and complies with privacy regulations.

Quick Start

Run the critic-security skill on the contract file 'new-feature-contract.md'.

Frequently Asked Questions about critic-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate security and privacy gap analysis in contracts?▼

Automate security and privacy gap analysis by scanning contract content to identify missing security controls, improper PII handling, and common injection surfaces using predefined runtime rules.

What does contract vulnerability detection for missing security controls look for?▼

Contract vulnerability detection scans for missing authentication, authorization, and data handling measures to verify agreements adhere to security best practices and comply with privacy regulations.

How do I check a contract for improper PII handling before deploying a new feature?▼

Check for improper PII handling by running the vulnerability detection Skill on the contract file to verify sensitive data handling and regulatory compliance before feature deployment.

Do I need to configure runtime rules to scan contracts for compliance gaps?▼

You need to provide access to the contract content and ensure the runtime rules defined in the reference directory are available for the analyzer to accurately identify security and privacy vulnerabilities.

What are the limitations of automated privacy analysis for contracts?▼

Automated privacy analysis relies strictly on the runtime rules defined in the reference directory, meaning its vulnerability detection scope is bounded by those configurations and requires explicit contract content access.

Related Skills

Explore More Software Engineering Skills→
camoneartcamoneart
5

sast-configuration

Configure Semgrep, SonarQube, and CodeQL for automated vulnerability detection in CI/CD pipelines.

Community
Advanced
KaakatiKaakati
2

compliance-auditor

Audit application code, infrastructure, and processes against SOC2, HIPAA, PCI-DSS, and GDPR frameworks.

Community
Advanced
riftzen-bitriftzen-bit

springboot-security

Identify and remediate security misconfigurations in Java Spring Boot services.

Community
Advanced
mejangomejango

algorand-vulnerability-scanner

Detect 11 known vulnerability patterns in Algorand TEAL and PyTeal source files.

Community
Advanced