sec-ops

Automate code reviews, security audits, and dependency vulnerability checks.

Updated Aug 27, 2026
One-click install
npx skills add https://github.com/TudeOrangBiasa/zenithgravity-kit --skill sec-ops
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: sec-ops
Source: https://github.com/TudeOrangBiasa/zenithgravity-kit/tree/main/.agent/skills/sec-ops
Command: npx skills add https://github.com/TudeOrangBiasa/zenithgravity-kit --skill sec-ops

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires rtk, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill addresses the critical need for robust security in software development by automating code reviews, security audits, and dependency vulnerability checks.

Core Features & Use Cases

  • Vulnerability Assessment: Identifies and categorizes security risks based on OWASP Top 10 and custom finding tiers (Critical, Important, Nit).
  • Security Hardening: Enforces zero-trust security principles for input validation, access control, authentication, and data handling.
  • Use Case: Before deploying a new feature, run the sec-ops skill to perform a comprehensive security audit, ensuring compliance with best practices and identifying potential exploits.

Quick Start

Use the sec-ops skill to perform a security audit on the current codebase.

Frequently Asked Questions about sec-ops

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform an automated security audit for OWASP Top 10 vulnerabilities?

Perform an automated security audit by running a comprehensive code review that identifies and categorizes OWASP Top 10 vulnerabilities. The audit enforces zero-trust principles for input validation and access control, rating risks by severity to harden applications against common threats.

How do I check dependency vulnerabilities before deploying a new feature?

Check dependency vulnerabilities by executing a final dry-run using tools like `rtk npm audit`. This process identifies and categorizes security risks based on custom finding tiers, ensuring your application is hardened against potential exploits before deployment.

What is the best way to harden application code against SQLi and XSS attacks?

Harden application code against SQLi and XSS by enforcing zero-trust security rules for input validation, authentication, and data handling. This approach identifies critical risks and applies OWASP Top 10 prevention measures to secure your application.

Does sec-ops support categorizing security findings by severity levels?

sec-ops supports categorizing security findings by severity levels, rating vulnerabilities into Critical, Important, and Nit tiers. This structured assessment highlights critical risks like SQLi alongside important logic bugs and minor formatting issues.

Do I need rtk to run dependency vulnerability checks?

You need `rtk` installed to perform the final dry-run dependency vulnerability checks. The Skill utilizes `rtk npm audit` as part of its comprehensive security audit to verify compliance and identify potential exploits in your dependencies.

Why does my code review fail the zero-trust security rules?

Your code review fails zero-trust security rules when input validation, access control, authentication, or data handling do not meet strict prevention standards. The audit enforces these principles to ensure robust security hardening against common threats.