Security Analyst

Analyze code for OWASP Top 10 security vulnerabilities and provide remediation advice.

Updated Jan 17, 2026

Search Tags:#security #vulnerability #owasp #secure coding #audit #threat modeling

Ready to run

npx skills add https://github.com/CarGDev/codetyper.cli --skill security-analyst-cargdev

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: Security Analyst
Source: https://github.com/CarGDev/codetyper.cli/tree/main/src/skills/security
Command: npx skills add https://github.com/CarGDev/codetyper.cli --skill security-analyst-cargdev

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill identifies and helps remediate security vulnerabilities in code, ensuring applications are robust against common threats and adhere to secure coding standards.

Core Features & Use Cases

Vulnerability Detection: Analyzes code against OWASP Top 10 and common secure coding rules.
Threat Modeling: Helps map attack surfaces and classify potential threats using methodologies like STRIDE.
Dependency Auditing: Checks for known vulnerabilities in project dependencies.
Remediation Guidance: Provides specific, actionable steps to fix identified security issues.
Use Case: A developer can use this Skill to perform a security audit on a new feature before deployment, identifying and fixing potential SQL injection or broken access control flaws.

Quick Start

Use the security skill to audit the current project for OWASP Top 10 vulnerabilities.

Frequently Asked Questions about Security Analyst

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I audit code for OWASP Top 10 vulnerabilities?▼

To audit code for OWASP Top 10 vulnerabilities, this Skill analyzes your project files to detect injection flaws, broken access control, and cryptographic failures, and provides specific remediation guidance for secure coding.

What is threat modeling using the STRIDE methodology?▼

Threat modeling using the STRIDE methodology involves mapping your application's attack surfaces and classifying potential security threats to ensure robust secure coding standards before deployment.

How do I check dependencies for known security vulnerabilities?▼

You can check dependencies for known security vulnerabilities by running a dependency audit, which scans project libraries for common flaws and provides specific remediation advice.

Can I detect SQL injection and broken access control automatically?▼

Yes, you can detect SQL injection and broken access control automatically by analyzing code patterns against OWASP Top 10 guidelines to identify and fix potential application security vulnerabilities.

Do I need shell command execution to perform a security audit?▼

Yes, shell command execution is required to perform a security audit, as the analysis relies on tools for reading files, searching patterns, and executing commands to identify vulnerabilities.