role-security-auditor

Identify OWASP Top 10 vulnerabilities and report severity with remediation guidance.

2|Updated Apr 10, 2024
One-click install
npx skills add https://github.com/gdurandvadas/dotfiles --skill role-security-auditor
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: role-security-auditor
Source: https://github.com/gdurandvadas/dotfiles/tree/main/config/opencode/skills/role-security-auditor
Command: npx skills add https://github.com/gdurandvadas/dotfiles --skill role-security-auditor

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Helps security teams and developers quickly identify weaknesses by scanning for OWASP Top 10 vulnerabilities, providing severity labels and actionable remediation guidance. It also supports compliance checks to demonstrate adherence to security standards during audits.

Core Features & Use Cases

  • OWASP Top 10 vulnerability scanning with severity tagging
  • Remediation guidance and evidence-backed recommendations
  • Security compliance evaluation with reporting suitable for audits
  • Use case: Code reviews, CI/CD security gates, third-party risk assessments

Quick Start

Initiate a security assessment to generate an OWASP Top 10 findings report with prioritized remediation steps.

Frequently Asked Questions about role-security-auditor

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my web application for OWASP Top 10 vulnerabilities?

Initiate a security assessment to scan web applications and APIs for OWASP Top 10 vulnerabilities. The process performs static analysis to identify security flaws and generates a report with severity tagging and actionable remediation guidance.

Can I use this security audit for compliance evaluation during code reviews?

Yes, this security audit supports compliance evaluation during code reviews and deployments. It produces evidence-backed findings and reporting suitable for demonstrating adherence to security standards during formal compliance checks.

What is the best way to get remediation guidance for API security flaws?

Running a security assessment on your APIs provides evidence-backed remediation guidance for detected flaws. It identifies vulnerabilities using static analysis and delivers prioritized, actionable steps to resolve the security issues.

Does this vulnerability scanning work for CI/CD security gates and runtime assessments?

Vulnerability scanning is designed for CI/CD security gates, code reviews, and runtime security assessments. It evaluates web applications, APIs, and data handling workflows to identify risks and report severity levels.

How do I assess third-party risk for data handling workflows?

Perform a security assessment on the third-party data handling workflows to evaluate risk. The assessment combines static analysis and compliance evaluation to identify OWASP Top 10 vulnerabilities and generate actionable findings.

What limitations exist when using static analysis for security compliance evaluation?

Static analysis identifies OWASP Top 10 vulnerabilities in software projects but may not detect runtime environment misconfigurations. It is applied during code reviews and deployments to provide remediation guidance and compliance reporting.