security-analysis

Identify and analyze project security posture to uncover vulnerabilities.

5|4|Updated Jan 12, 2026
One-click install
npx skills add https://github.com/davistroy/claude-marketplace --skill security-analysis-davistroy
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-analysis
Source: https://github.com/davistroy/claude-marketplace/tree/main/plugins/personal-plugin/skills/security-analysis
Command: npx skills add https://github.com/davistroy/claude-marketplace --skill security-analysis-davistroy

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Identify and analyze a project's security posture to uncover vulnerabilities.

Core Features & Use Cases

  • Phase-driven security analysis: discovery, vulnerability scanning, risk assessment, and remediation planning.
  • Tech-stack discovery: identifies languages, frameworks, dependencies, and configuration issues to inventory risk.
  • Context-aware guidance: produces practical, prioritized remediation steps and reports for stakeholders.

Quick Start

To begin, run the security-analysis skill against your project repository and provide scope details (languages, frameworks, deployment targets). The tool will perform discovery, assess vulnerabilities, score risk, and generate remediation recommendations.

Frequently Asked Questions about security-analysis

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a security analysis on my project repository?

Security vulnerability scanning is phase-driven, starting with discovering your technology stack and mapping the attack surface. It then conducts dependency audits and risk scoring to identify vulnerabilities across diverse workflows, culminating in actionable remediation guidance.

How do I audit project dependencies for known vulnerabilities?

Dependency audits are conducted during the discovery phase to identify languages, frameworks, and dependencies in your project inventory, uncovering known vulnerabilities and configuration issues to map the attack surface.

Can I use this security analysis tool across diverse technology stacks?

Yes, the security analysis applies across diverse tech stacks and workflows. It identifies your specific technology stack during discovery to inventory risk and generate context-aware remediation steps for stakeholders.

What is the best way to prioritize vulnerability remediation steps?

The best way to prioritize remediation is through risk scoring. The tool evaluates discovered vulnerabilities and configuration issues to produce practical, prioritized remediation steps and reports for stakeholders.

Does this security analysis tool support threat modeling and risk assessment?

Yes, the tool supports threat modeling and risk assessment. It maps the attack surface during discovery and applies risk scoring to evaluate vulnerabilities, resulting in a comprehensive security posture report.