Classify security findings with OWASP, CWE, and CVSS v3.1 scoring.
npx skills add https://github.com/jpoley/flowspec --skill security-analyst
Please help me install this Agent Skill. Skill: security-analyst Source: https://github.com/jpoley/flowspec/tree/main/.claude/skills/security-analyst Command: npx skills add https://github.com/jpoley/flowspec --skill security-analyst
This Skill empowers security teams to quickly classify vulnerabilities, quantify risk, and map findings to compliance frameworks using standardized references such as OWASP, CWE, and CVSS. It provides a structured approach to triage, prioritization, and reporting, reducing time to remediation.
Use the security-analyst skill to analyze a vulnerability finding and generate a prioritized remediation plan.
High-intent search queries and answers about installing and using this skill.
OWASP Top 10 classification maps vulnerabilities to known attack categories, while CVSS v3.1 scoring quantifies severity on a 0–10 scale with justified metrics. This Skill automates both mappings and generates scores with business impact analysis to prioritize remediation across your findings.
Yes. This Skill aligns classified vulnerabilities to SOC 2, ISO 27001, PCI-DSS, and HIPAA controls, enabling compliance teams to track remediation against specific regulatory requirements and audit readiness.
Use CWE taxonomy categorization and CVSS-driven risk quantification to rank findings by business impact and asset criticality. This Skill generates prioritized remediation plans and executive summaries for rapid triage at scale.
CWE (Common Weakness Enumeration) organizes root causes of vulnerabilities into a structured taxonomy. This Skill maps findings to CWE categories to standardize remediation guidance and reduce duplicate efforts across your security team.
Provide a security finding with details like description, affected component, and severity indicators. The Skill accepts structured vulnerability reports and outputs OWASP, CWE, and CVSS classifications with compliance mappings and remediation steps.
This Skill covers SOC 2, ISO 27001, PCI-DSS, and HIPAA compliance contexts. It maps risk assessments and CVSS scores to controls within each framework for audit documentation and remediation tracking.
jassicsNormalize and deduplicate vulnerability scan findings from multiple scanners.
jaskaranhundalManage security finding lifecycles with risk scores and SLA enforcement.
randalmurphalCompute CVSS scores and prioritize vulnerabilities with weighted ranking.
nobelkIdentify security vulnerabilities in codebases via manual review and automated pattern detection.
