skills.rest
alfredolopez80
alfredolopez80COMMUNITY
Explore all skills by this author →
Website𝕏@alfredolopez80GitHub

security

Identify security vulnerabilities and generate JSON findings with CWE and OWASP references.

145|21|Updated Jan 2, 2026
Search Tags:#security#vulnerability#audit#codex#compliance#gates#minimax
One-click install
npx skills add https://github.com/alfredolopez80/multi-agent-ralph-loop --skill security-alfredolopez80
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security
Source: https://github.com/alfredolopez80/multi-agent-ralph-loop/tree/main/.claude/skills/security
Command: npx skills add https://github.com/alfredolopez80/multi-agent-ralph-loop --skill security-alfredolopez80

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Streamline and strengthen codebase security by coordinating Codex-based primary analysis with MiniMax second opinions, delivering consistent, actionable remediation guidance.

Core Features & Use Cases

  • Codex-driven security audit: CWE and OWASP coverage with structured JSON findings.
  • MiniMax second opinion: independent validation to catch edge cases and reduce false positives.
  • Quality-gates integration: feeds results into Ralph gates for policy-driven merge checks.
  • Structured reporting: includes severity, CWE references, OWASP mappings, code snippets, and remediation steps.

Quick Start

Invoke /security on your project to run a Codex-driven audit with a MiniMax second opinion and generate a structured JSON report.

Frequently Asked Questions about security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
What is an automated multi-agent security audit?▼

An automated multi-agent security audit uses Codex GPT-5 for primary vulnerability analysis and MiniMax for cross-validation, identifying security flaws in authentication, cryptography, and input handling to reduce false positives.

How do I get structured JSON findings for CWE and OWASP vulnerabilities?▼

You get structured JSON findings by invoking an automated security audit that outputs severity levels, CWE references, OWASP categories, code snippets, and remediation steps, which is suitable for direct integration with quality gates.

Can I use security audit results to enforce merge checks in my CI pipeline?▼

Yes, the security audit generates a structured JSON report with severity and CWE references designed for integration with Ralph gates, enabling policy-driven merge checks to block vulnerable code from deployment.

Does multi-agent cross-validation help reduce false positives in codebase security audits?▼

Multi-agent cross-validation reduces false positives by using MiniMax to provide an independent second opinion on Codex GPT-5 primary analysis, ensuring edge cases in authorization and deployment configurations are caught.

What code paths are covered by a Codex-driven vulnerability audit?▼

A Codex-driven vulnerability audit covers code paths related to authentication, authorization, input handling, cryptography, and deployment configurations to identify and report security vulnerabilities comprehensively.

Related Skills

Explore More Software Engineering Skills→
lukehindslukehinds

posture

Assess GitHub repository readiness for vulnerability reports via security policy checks.

Community
Intermediate
TrossitecTrossitec
1

security-scan

Scan .NET applications for vulnerabilities and generate severity-rated OWASP findings.

Official
Advanced
timequitytimequity
6

ci-cd-pipelines

Automate CI/CD pipeline design and deployment workflows for GitHub Actions and GitLab CI.

Official
Advanced
dreadnodedreadnode
11

vuln-critic

Filter low-quality and false positive vulnerability findings from scanners and agent output.

Official
Intermediate