skills.rest
jota-batuta
jota-batutaCOMMUNITY
Explore all skills by this author →
GitHub

security-audit

Identify and remediate security risks in AI-generated code with threat modeling, OWASP, and secrets scanning.

Updated Feb 20, 2026
Search Tags:#owasp#threat-modeling#code-review#security-audit#llm-safety#dependency-audit#secrets-scan
One-click install
npx skills add https://github.com/jota-batuta/batuta-dots --skill security-audit-jota-batuta
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-audit
Source: https://github.com/jota-batuta/batuta-dots/tree/main/BatutaClaude/skills/security-audit
Command: npx skills add https://github.com/jota-batuta/batuta-dots --skill security-audit-jota-batuta

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Threat modeling, OWASP, and secrets scanning help teams systematically identify and mitigate security risks in AI-generated code, preventing subtle vulnerabilities from slipping into production.

Core Features & Use Cases

  • Threat modeling and risk assessment for AI-driven features.
  • Automated secrets scanning and dependency auditing.
  • Security design reviews integrated into the SDLC across projects and teams.
  • Use Case: security gating during sdd-design and sdd-verify phases to ensure design correctness.

Quick Start

Run a security audit across the codebase to identify threats, scan for secrets, and generate a threat-model-backed risk report.

Frequently Asked Questions about security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a security audit on AI-generated code?▼

Perform a security audit by applying threat modeling, OWASP guidance, and secrets scanning to identify and remediate risks in AI-generated code before deployment.

What is threat modeling for AI-driven features?▼

Threat modeling for AI-driven features is a structured protocol to systematically identify, assess, and mitigate security risks and design flaws unique to AI-generated code and LLM integrations.

Does this security audit include dependency auditing and secrets detection?▼

Yes, the security audit includes automated dependency auditing and secrets detection alongside threat modeling to provide comprehensive risk assessment and clear mitigations.

Can I use threat modeling during the software design and verification phases?▼

Yes, you can apply this threat modeling during the sdd-design and sdd-verify phases to enforce secure design decisions, validate code reviews, and ensure design correctness.

What's the best way to harden LLM prompts against security risks?▼

The best way to harden LLM prompts is enforcing a structured security protocol that applies LLM prompt hardening, threat modeling, and dependency auditing to generate a risk report with clear mitigations.

Why do I need secrets scanning for AI-generated code?▼

You need secrets scanning for AI-generated code because AI models can inadvertently introduce hardcoded credentials or subtle vulnerabilities, requiring systematic detection to prevent security breaches.

Related Skills

Explore More Software Engineering Skills→
ericdahl-devericdahl-dev

cso

Audit codebases for secrets, dependencies, CI/CD, and OWASP Top 10.

Official
Advanced
AndreKuraitAndreKurait

threat-modeling-with-aws-security-agent

Apply STRIDE threat modeling to AWS design documents and generate risk levels and mitigations.

Community
Advanced
kurojskurojs
2

sdd-onboard

Guides users through an SDD onboarding cycle on their actual codebase to implement a small, safe improvement.

Community
Advanced
borgheiborghei
467

senior-security

Identify and mitigate security risks in software systems using expert security engineering practices.

Community
Advanced