Identify software codebase vulnerabilities and map findings to OWASP Top 10.
npx skills add https://github.com/89jobrien/steve --skill security-audit-89jobrien
Please help me install this Agent Skill. Skill: security-audit Source: https://github.com/89jobrien/steve/tree/main/steve/skills/security-audit Command: npx skills add https://github.com/89jobrien/steve --skill security-audit-89jobrien
Provides comprehensive security reviews to identify vulnerabilities and plan remediation.
Run a security audit against your application to generate a structured report.
High-intent search queries and answers about installing and using this skill.
Static and dynamic security analysis identifies vulnerabilities by examining code logic, data flow, and runtime behavior. This skill performs comprehensive code review to detect common weakness patterns, map findings to OWASP Top 10 categories, and produce actionable remediation steps for web and enterprise applications.
OWASP Top 10 assessment maps security findings to the ten most critical web application vulnerabilities. This skill classifies discovered vulnerabilities against OWASP categories, helping prioritize remediation by risk severity and ensuring your application addresses industry-recognized threat classes.
Dependency analysis scans project components for known vulnerabilities by examining package versions and security advisories. This skill identifies at-risk dependencies, assigns CVSS severity scores, and recommends replacement versions or mitigations in your remediation roadmap.
Remediation planning produces structured roadmaps with proof-of-concept demonstrations showing vulnerability impact and exploit paths. This skill generates actionable plans that prioritize fixes by CVSS score, CWE mapping, and business risk to guide your security patching strategy.
Authentication and data protection reviews examine access control mechanisms and sensitive data safeguards. This skill assesses both during security audits, identifying weak authentication patterns, encryption gaps, and data exposure risks across your application architecture.
A security audit report includes vulnerability findings mapped to CVSS scores and CWE identifiers, OWASP Top 10 classifications, proof-of-concept demonstrations, and a prioritized remediation roadmap. Output is structured for immediate handoff to development and compliance teams.
utsavthakurAudit codebases with static analysis and generate structured risk reports.
AgileSmagileIdentify and remediate security and compliance gaps via phase-driven penetration tests.
jpoleyClassify security findings with OWASP, CWE, and CVSS v3.1 scoring.
simotaPerform dynamic security testing with OWASP ZAP and Burp Suite.
