Security Analysis Skill

Security vulnerability detection scans your codebase to identify SQL injection, XSS, authentication bypass, secrets exposure, and dependency vulnerabilities. The Skill performs comprehensive analysis including threat modeling and attack surface mapping, then generates CVSS scores and compliance-ready reports without manual auditing effort.

Yes. Pre-deployment security checks validate web applications, APIs, services, and cloud configurations before release. The Skill conducts cryptographic validation, authentication review, and threat modeling to identify flaws before production, meeting functional and technical compliance requirements.

A security audit report includes vulnerability findings with CVSS scores, threat models, attack surface analysis results, cryptographic validation outcomes, authentication review details, and remediation recommendations. Reports are audit-ready and compliance-focused for formal security assessments.

Prepare by having your codebase accessible for scanning. The Skill accepts web application code, API implementations, service configurations, and cloud infrastructure definitions as input, then analyzes them for vulnerabilities and compliance gaps.

Yes. Secrets exposure detection is a core vulnerability class the Skill identifies during comprehensive analysis, flagging hardcoded credentials, API keys, and other sensitive data embedded in source code and configurations.

Yes. Compliance assessments leverage the Skill's threat modeling, attack surface analysis, and audit-ready report generation to demonstrate security posture and meet regulatory requirements during formal compliance reviews.