miracle-security

Automate security code reviews and enterprise assessments with parallel agents.

17|1|Updated Feb 21, 2026
One-click install
npx skills add https://github.com/vasilievyakov/miracle-infrastructure --skill miracle-security
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: miracle-security
Source: https://github.com/vasilievyakov/miracle-infrastructure/tree/main/skills/miracle-security
Command: npx skills add https://github.com/vasilievyakov/miracle-infrastructure --skill miracle-security

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Code review and security assessments can be inconsistent when done by a single pass or a single reviewer. Miracle Security provides five parallel audit agents for code review and four evaluators for enterprise assessment, delivering more reliable, converged findings and a clear maturity view.

Core Features & Use Cases

  • Mode 1: Code Review — five agents scan for OWASP Top 10, secrets leaks, authentication issues, dependency risks, and logic flaws.
  • Mode 2: Enterprise Assessment — four evaluators assess data handling, access control, compliance readiness, and operational resilience, producing a risk maturity scorecard.
  • Threat model calibration — threat profile adjusts severity for deployment context to reduce false positives.
  • Architecture — follows the /directors pattern for coordinating agents and directors.
  • Use Case — pre-release security audits, enterprise sales readiness, and regression checks.

Quick Start

Trigger /security review or /security assess to start the appropriate multi-agent security workflow.

Frequently Asked Questions about miracle-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate security code review for vulnerabilities before release?

Automated security code review uses five parallel agents to detect OWASP Top 10 flaws, leaked secrets, authentication issues, dependency risks, and logic gaps. Trigger /security review to start scanning your pre-release codebase for converged vulnerability findings and remediation guidance.

What is threat modeling calibration for code vulnerability assessment?

Threat modeling calibration adjusts vulnerability severity based on your specific deployment context. This threat-profile calibration reduces false positives during security assessments by aligning detection sensitivity with the actual operational risk environment of your product.

Can I assess enterprise compliance readiness using automated security checks?

Yes, enterprise compliance readiness is assessed by four evaluators examining data handling, access control, compliance posture, and operational resilience. Triggering /security assess produces a risk maturity scorecard for enterprise sales readiness across diverse stacks.

Does multi-agent security review work for diverse tech stacks?

Multi-agent security review applies to pre-release codebases across diverse technology stacks. The five code-review agents and four enterprise evaluators operate in parallel to cover different vulnerability categories and compliance gaps regardless of the underlying architecture.

Why use parallel agents for security reviews instead of a single pass?

Parallel security agents eliminate the inconsistency of a single-pass review by deploying specialized auditors for distinct categories like secrets, dependencies, and logic flaws. This multi-agent architecture follows the /directors pattern to converge findings into reliable, actionable results.