cybersecurity

Identify and remediate security vulnerabilities in code, configurations, and deployments.

16|9|Updated Nov 6, 2013
One-click install
npx skills add https://github.com/erikstmartin/dotfiles --skill cybersecurity-erikstmartin
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: cybersecurity
Source: https://github.com/erikstmartin/dotfiles/tree/main/skills/catalog/infra/cybersecurity
Command: npx skills add https://github.com/erikstmartin/dotfiles --skill cybersecurity-erikstmartin

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This workflow guides security reviews of code, configurations, and deployments to identify and remediate vulnerabilities, reducing risk across systems.

Core Features & Use Cases

  • Threat modeling and risk assessment to prioritize mitigations across assets and actors.
  • Systematic audits covering secrets handling, authentication/authorization checks, input validation, dependency security, and encryption at rest and in transit.
  • Harden and verify configurations for containers, networks, and applications to reduce attack surface and ensure security best practices.

Quick Start

Audit a project for vulnerabilities and harden its deployment configurations in a single, immediate action.

Frequently Asked Questions about cybersecurity

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit my code for security vulnerabilities and harden deployment configurations?

To audit code and harden deployment configurations, you systematically review threat models, secrets handling, authentication, input validation, dependencies, and encryption. Hardening reduces the attack surface across containers, networks, and applications.

What is threat modeling and when do I need it for vulnerability remediation?

Threat modeling assesses risks across assets and actors to prioritize vulnerability remediation. You need threat modeling before deploying services or containers to systematically identify and mitigate potential security flaws.

Can I use this security audit workflow for container hardening and network configurations?

Yes, this security audit workflow applies to container hardening and network configurations. It verifies configurations to reduce the attack surface and ensures authentication, authorization, and encryption best practices are met.

What's the best way to check for secrets handling and encryption issues in my application?

The best way to check for secrets handling and encryption issues is a systematic security audit. This reviews encryption at rest and in transit, validates authentication checks, and ensures dependency security across your codebase.

Does this vulnerability remediation process cover input validation and dependency security checks?

Yes, vulnerability remediation covers input validation and dependency security checks. The workflow systematically audits these areas alongside authentication and authorization to identify and remediate vulnerabilities in your code.

How do I perform a security audit to reduce the attack surface of my infrastructure?

Perform a security audit to reduce your infrastructure attack surface by applying threat modeling and hardening workflows. This verifies configurations for containers, networks, and applications while ensuring encryption and authentication best practices.