skills.rest
opsMachine
opsMachineOFFICIAL
Explore all skills by this author →
WebsiteGitHub

full-security-audit

Orchestrate a four-phase security audit pipeline and generate a SECURITY_PLAN.md.

1|Updated Feb 10, 2026
Search Tags:#security#vulnerability#codebase#audit#compliance#pipeline#orchestrator
One-click install
npx skills add https://github.com/opsMachine/OM-Agency --skill full-security-audit
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: full-security-audit
Source: https://github.com/opsMachine/OM-Agency/tree/main/skills/full-security-audit
Command: npx skills add https://github.com/opsMachine/OM-Agency --skill full-security-audit

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This pipeline orchestrates a comprehensive, end-to-end security evaluation of a codebase by coordinating four autonomous phases, reducing missed vulnerabilities and accelerating secure releases.

Core Features & Use Cases

  • Orchestrates four standalone phase skills (audit, critique, spec, fix) to identify, prioritize, and remediate security gaps.
  • Handles periodic security reviews, pre-release checks, and incident response by providing a repeatable, auditable workflow.
  • Produces actionable outputs (e.g., SECURITY_PLAN.md) and clear backlog guidance for remediation.

Quick Start

Run the full security audit pipeline against your repository to scan for vulnerabilities and generate the required plan and fixes.

Frequently Asked Questions about full-security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate a complete security audit of my codebase before a release?▼

Automate a codebase security audit by running an orchestrated pipeline that evaluates auth, data, and API surfaces. It coordinates four phases to identify vulnerabilities, prioritize fixes, and generate a SECURITY_PLAN.md for actionable remediation.

What is a 4-phase security audit pipeline and how does it work?▼

A 4-phase security audit pipeline orchestrates autonomous audit, critique, spec, and fix stages. It evaluates your codebase end-to-end to identify vulnerabilities and outputs clear backlog guidance to accelerate secure releases.

How do I check my codebase for vulnerabilities after a security incident?▼

Check for vulnerabilities after an incident by executing a reproducible security audit workflow. It scans the codebase to ensure no missed vulnerabilities remain and produces a SECURITY_PLAN.md to guide remediation.

Does the security audit pipeline generate compliance reports and backlog guidance?▼

The security audit pipeline generates a SECURITY_PLAN.md containing actionable outputs and clear backlog guidance. It ensures reproducible steps for compliance during periodic reviews and pre-release checks.

What is the best way to identify and prioritize security gaps in a codebase?▼

Identify and prioritize security gaps by orchestrating an end-to-end security evaluation. This coordinates autonomous audit, critique, spec, and fix phases to evaluate auth, data, and API surfaces for remediation.

Related Skills

Explore More Software Engineering Skills→
securityreviewaisecurityreviewai

project-overview-analysis

Analyzes Git repositories to produce summaries of their structure, risks, and key components.

Official
Intermediate
simplefarmer69simplefarmer69
2

devops-bridge

Integrate GitHub, CI/CD, messaging platforms, and issue trackers to automate developer operations.

Community
Advanced
luokai25luokai25

devsecops-expert

Integrates security scans into CI/CD pipelines automating vulnerability detection.

Community
Advanced
camoneartcamoneart
5

sast-configuration

Configure Semgrep, SonarQube, and CodeQL for automated vulnerability detection in CI/CD pipelines.

Community
Advanced