security-agent

Analyze code and systems for vulnerabilities and prioritized remediation recommendations.

Updated Dec 3, 2025
One-click install
npx skills add https://github.com/Unicorn/Radium --skill security-agent-unicorn
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-agent
Source: https://github.com/Unicorn/Radium/tree/main/skills/examples/security-agent
Command: npx skills add https://github.com/Unicorn/Radium --skill security-agent-unicorn

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill provides deep security analysis of code and system designs to identify vulnerabilities, articulate attack vectors, and recommend fixes so teams can reduce risk before deployment.

Core Features & Use Cases

  • Vulnerability identification: Detect SQL injection, XSS, CSRF, insecure deserialization, and related issues.
  • Authentication and authorization review: Analyze auth flows, session handling, and access controls for weaknesses.
  • Cryptography and data handling: Review cryptographic usage and data protection practices for misconfigurations and misuse.
  • Detailed remediation: Explain vulnerabilities, assess impact and exploitability, and propose prioritized, secure fixes.
  • Use Case: Conduct a pre-release security audit of a web backend and provide a prioritized list of fixes with code-safe recommendations.

Quick Start

Analyze the provided codebase for SQL injection, XSS, CSRF, insecure authentication, and cryptographic weaknesses, and return prioritized findings with remediation steps.

Frequently Asked Questions about security-agent

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I find SQL injection and XSS vulnerabilities in my codebase?

Security analysis detects SQL injection and XSS vulnerabilities by deeply reviewing code paths for unsafe input handling. It identifies attack vectors, assesses exploitability impact, and provides prioritized remediation steps with secure code recommendations.

What is threat modeling for web applications and when do I need it?

Threat modeling for web applications is a structured assessment of system architecture to identify security threats and weaknesses. You need it during design and pre-release phases to articulate attack vectors and reduce deployment risk before exposing services.

How do I perform a cryptography review for data protection misconfigurations?

A cryptography review analyzes your codebase for misconfigurations and misuse of cryptographic algorithms. It evaluates data handling practices, identifies weak implementations, and recommends secure fixes to ensure proper data protection and session handling.

Can I audit authentication and authorization flows without external dependencies?

Yes, you can audit authentication and authorization flows without external dependencies by analyzing access controls and session handling logic directly. The review identifies weaknesses in auth flows and provides secure fixes to prevent unauthorized access.

What is the best way to get prioritized remediation recommendations for insecure deserialization?

The best way to get prioritized remediation recommendations for insecure deserialization is through a deep security analysis. It detects the vulnerability, explains the attack vector, assesses the impact, and proposes code-safe fixes ordered by exploitability risk.

Does this security analysis cover CSRF and related web application vulnerabilities?

Yes, this security analysis covers CSRF and related web application vulnerabilities. It performs deep code reviews to identify cross-site request forgery issues, assesses their exploitability impact, and provides detailed remediation steps to secure the backend.