security-audit

Audit completed code phases for vulnerabilities and generate a SECURITY.md with prioritized remediation.

9|1|Updated Feb 1, 2026

Search Tags:#security #owasp #audit #compliance #threat-modeling #code-review #mitre-attack

Ready to run

npx skills add https://github.com/calcosmic/Aether --skill security-audit-calcosmic

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-audit
Source: https://github.com/calcosmic/Aether/tree/main/.aether/skills-codex/colony/security-audit
Command: npx skills add https://github.com/calcosmic/Aether --skill security-audit-calcosmic

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Retroactive security audit that examines completed phase implementations to verify threat mitigations are effective and identify vulnerabilities. Maps findings to OWASP Top 10 and MITRE ATT&CK frameworks so results are standardized and actionable. Produces a SECURITY.md artifact with prioritized remediation guidance.

Core Features & Use Cases

Threat modeling and scope definition to identify assets, trust boundaries, and adversaries.
Systematic code-level and dependency audits aligned to OWASP Top 10 and MITRE ATT&CK, with actionable remediation guidance.
Automated generation of a SECURITY.md artifact that documents findings, risk levels, and prioritized fixes for audits across project phases.

Quick Start

Run a security audit on the repository to generate a structured SECURITY.md with prioritized remediation guidance.

Frequently Asked Questions about security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I perform a retroactive security audit on completed code phases?▼

Perform a retroactive security audit by analyzing completed code implementations to verify threat mitigations and identify vulnerabilities across authentication, data storage, and external integrations. The process generates a SECURITY.md with prioritized remediation guidance.

What is the best way to map code vulnerabilities to OWASP Top 10 and MITRE ATT&CK frameworks?▼

Map code vulnerabilities to OWASP Top 10 and MITRE ATT&CK frameworks by conducting systematic code-level and dependency audits. This standardizes findings into actionable formats, documenting risk levels and prioritized fixes within a generated SECURITY.md artifact.

How does threat modeling apply to securing external integrations and dependencies?▼

Threat modeling secures external integrations and dependencies by defining scope to identify critical assets, trust boundaries, and adversaries. This structured approach ensures systematic code-level audits effectively verify mitigations and uncover hidden vulnerabilities.

Can I generate a SECURITY.md file with prioritized remediation guidance for my repository?▼

Yes, you can generate a SECURITY.md file with prioritized remediation guidance for your repository. The audit examines completed phase implementations, maps findings to OWASP Top 10, and outputs structured documentation of risks and fixes.

Does this security audit cover authentication and authorization code review?▼

Yes, this security audit covers authentication and authorization code review. It systematically examines these completed implementations, alongside data storage and external integrations, to verify effective threat mitigations and identify potential vulnerabilities.

When should I run a security audit on my project dependencies?▼

Run a security audit on project dependencies when completing implementation phases to verify threat mitigations are effective. Mapping dependency updates to MITRE ATT&CK and OWASP Top 10 ensures vulnerabilities are documented with prioritized fixes in SECURITY.md.