skills.rest
CarGDev
CarGDevCOMMUNITY
Explore all skills by this author →
Website𝕏@CarGDevGitHub

Security Analyst

Analyze code for OWASP Top 10 security vulnerabilities and provide remediation advice.

Updated Jan 17, 2026
Search Tags:#security#vulnerability#owasp#secure coding#audit#threat modeling
One-click install
npx skills add https://github.com/CarGDev/codetyper.cli --skill security-analyst-cargdev
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: Security Analyst
Source: https://github.com/CarGDev/codetyper.cli/tree/main/src/skills/security
Command: npx skills add https://github.com/CarGDev/codetyper.cli --skill security-analyst-cargdev

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill identifies and helps remediate security vulnerabilities in code, ensuring applications are robust against common threats and adhere to secure coding standards.

Core Features & Use Cases

  • Vulnerability Detection: Analyzes code against OWASP Top 10 and common secure coding rules.
  • Threat Modeling: Helps map attack surfaces and classify potential threats using methodologies like STRIDE.
  • Dependency Auditing: Checks for known vulnerabilities in project dependencies.
  • Remediation Guidance: Provides specific, actionable steps to fix identified security issues.
  • Use Case: A developer can use this Skill to perform a security audit on a new feature before deployment, identifying and fixing potential SQL injection or broken access control flaws.

Quick Start

Use the security skill to audit the current project for OWASP Top 10 vulnerabilities.

Frequently Asked Questions about Security Analyst

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit code for OWASP Top 10 vulnerabilities?▼

To audit code for OWASP Top 10 vulnerabilities, this Skill analyzes your project files to detect injection flaws, broken access control, and cryptographic failures, and provides specific remediation guidance for secure coding.

What is threat modeling using the STRIDE methodology?▼

Threat modeling using the STRIDE methodology involves mapping your application's attack surfaces and classifying potential security threats to ensure robust secure coding standards before deployment.

How do I check dependencies for known security vulnerabilities?▼

You can check dependencies for known security vulnerabilities by running a dependency audit, which scans project libraries for common flaws and provides specific remediation advice.

Can I detect SQL injection and broken access control automatically?▼

Yes, you can detect SQL injection and broken access control automatically by analyzing code patterns against OWASP Top 10 guidelines to identify and fix potential application security vulnerabilities.

Do I need shell command execution to perform a security audit?▼

Yes, shell command execution is required to perform a security audit, as the analysis relies on tools for reading files, searching patterns, and executing commands to identify vulnerabilities.

Related Skills

Explore More Software Engineering Skills→
cdalsoniiicdalsoniii

Architecture Fitness Functions

Evaluate Go project architecture with automated fitness functions for layer boundaries, dependencies, and complexity.

Community
Intermediate
mahmutkamahmutka
13

Secure Code Review

Trace untrusted input to dangerous sinks across Python, JavaScript, Go, and Java.

Community
Advanced
mbwsimsmbwsims
71

threat-model

Generate STRIDE-based threat models for software features and modules.

Community
Advanced
jassicsjassics
6

sast-review

Triage SAST findings to rank true vulnerabilities and suggest remediation.

Community
Advanced