skills.rest
giwa
giwaCOMMUNITY
Explore all skills by this author →
GitHub

security-analyst

Delegate security analysis and vulnerability assessment to a GPT Security Analyst expert.

Updated Jan 31, 2026
Search Tags:#security#vulnerability#implementation#threat-modeling#code-review#advisory#codex-cli
One-click install
npx skills add https://github.com/giwa/codex-helper --skill security-analyst-giwa
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-analyst
Source: https://github.com/giwa/codex-helper/tree/main/skills/security-analyst
Command: npx skills add https://github.com/giwa/codex-helper --skill security-analyst-giwa

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Delegates security analysis and vulnerability assessment to a GPT Security Analyst expert.

Core Features & Use Cases

  • Advisory mode for analysis and threat modeling guidance
  • Implementation mode for remediation and hardening steps
  • Structured delegation prompts with a seven-section format
  • Supports codex-cli based execution in a sandboxed environment
  • Suitable for reviewing authentication, API endpoints, and data handling

Quick Start

Provide a security task with CONTEXT and MODE to begin analysis.

Frequently Asked Questions about security-analyst

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform an automated vulnerability assessment on my code?▼

Automated vulnerability assessment is performed by delegating security analysis to a GPT expert using structured prompts. You provide a security task with context and mode to receive expert code review and threat modeling.

What is threat modeling and how does it apply to API endpoints?▼

Threat modeling for API endpoints involves analyzing authentication flows and data handling to identify security vulnerabilities. The advisory mode provides guidance on this process by evaluating your software project's specific attack surface.

Can I use codex-cli for safe sandboxed execution during security reviews?▼

Yes, sandboxed execution via codex-cli is supported for security reviews. The skill utilizes codex exec to safely run implementation workflows for remediation and hardening steps without risking your local environment.

How do I get remediation steps after identifying a security vulnerability?▼

To get remediation steps, you switch to implementation mode after identifying a security vulnerability. This mode provides actionable hardening steps and code fixes based on the initial advisory analysis.

Does this approach work for reviewing authentication flows and data handling?▼

Yes, this approach works for reviewing authentication flows and data handling across software projects. It applies specialized security analysis to these areas using a seven-section delegation prompt format.

What is the difference between advisory and implementation modes for code review?▼

Advisory mode focuses on security analysis and threat modeling guidance, while implementation mode executes remediation and hardening steps. Both use structured delegation prompts to process your security review tasks.

Related Skills

Explore More Software Engineering Skills→
securityreviewaisecurityreviewai

project-overview-analysis

Analyzes Git repositories to produce summaries of their structure, risks, and key components.

Official
Intermediate
deepgramdeepgram
456

deepgram-python-maintaining-sdk

Regenerate Fern-based Python SDKs and reconcile manual patches.

Official
Advanced
ivegamsftivegamsft

security

Automate security audits, threat modeling, and vulnerability assessments for code.

Community
Advanced
Serg28Serg28

security-reviewer

Automate security audits with semgrep, trivy, gitleaks, and dependency scanners.

Community
Intermediate