skills.rest
florianbuetow
florianbuetowCOMMUNITY
Explore all skills by this author →
Website𝕏@bytetweetsGitHub

full-audit

Launch all security frameworks and red team agents to audit a codebase.

12|1|Updated Feb 9, 2026
Search Tags:#code review#security#vulnerability#audit#red team#framework analysis
One-click install
npx skills add https://github.com/florianbuetow/claude-code --skill full-audit-florianbuetow
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: full-audit
Source: https://github.com/florianbuetow/claude-code/tree/main/plugins/appsec/skills/full-audit
Command: npx skills add https://github.com/florianbuetow/claude-code --skill full-audit-florianbuetow

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill automates an exhaustive security review of a codebase, identifying vulnerabilities across various frameworks and simulating real-world attack scenarios.

Core Features & Use Cases

  • Full Codebase Scan: Analyzes the entire project for security flaws.
  • Multi-Framework Analysis: Integrates checks for OWASP Top 10, STRIDE, PASTA, LINDDUN, and SANS/CWE Top 25.
  • Red Team Simulation: Employs various attacker personas to find exploitable vulnerabilities.
  • Use Case: Before deploying a new application, run a full audit to ensure all critical security vulnerabilities are identified and addressed, providing a detailed report for remediation.

Quick Start

Initiate a full security audit of the current project, ensuring all tools and frameworks are utilized.

Frequently Asked Questions about full-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate a comprehensive security audit of my codebase?▼

A comprehensive security audit is automated by launching integrated scanners and red team agents to analyze the entire codebase, identifying vulnerabilities and generating a detailed Markdown report for remediation.

What security frameworks are included in a full codebase vulnerability analysis?▼

A full vulnerability analysis integrates checks for multiple security frameworks, including OWASP Top 10, STRIDE, PASTA, LINDDUN, and SANS/CWE Top 25, to ensure exhaustive coverage of potential flaws.

Can I simulate real-world attack scenarios during a code review?▼

Real-world attack scenarios are simulated during code review by employing various red team attacker personas to actively find and document exploitable vulnerabilities within the codebase.

Does a full security audit require special environment configurations to run?▼

A full security audit requires a robust execution environment capable of running multiple subagents concurrently and managing intermediate report artifacts to complete the exhaustive review successfully.

What format does the comprehensive security audit report use?▼

The comprehensive security audit report uses a dated Markdown format, detailing identified findings, potential attack chains, and any coverage gaps discovered during the analysis.

When should I perform a full security framework analysis on my project?▼

A full security framework analysis should be performed before deploying a new application to ensure all critical security vulnerabilities are identified and addressed, providing a detailed report for remediation.

Related Skills

Explore More Software Engineering Skills→
ElliotJLTElliotJLT
60

fan-out

Decompose tasks into independent subtasks and dispatch them to parallel agents.

Community
Intermediate
cc01cccc01cc
4

multi-package-coverage-audit

Consolidate test coverage gaps across multi-package monorepos into prioritized test plans.

Community
Intermediate
MonumentalSystemsMonumentalSystems
17

threat-modeling

Structure threat discovery and risk prioritization using STRIDE, PASTA, and LINDDUN frameworks.

Official
Intermediate
florianbuetowflorianbuetow
12

run

Detect tech stack, run parallel security scans, and consolidate findings.

Community
Advanced