security-audit

Coordinate Red Team and Blue Team assessments to generate SECURITY_REPORT.md.

Updated Jul 10, 2025
One-click install
npx skills add https://github.com/junkisai/dotfiles --skill security-audit-junkisai
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-audit
Source: https://github.com/junkisai/dotfiles/tree/main/.claude/skills/security-audit
Command: npx skills add https://github.com/junkisai/dotfiles --skill security-audit-junkisai

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill coordinates Red Team (attack) and Blue Team (defense) assessments to deliver a unified SECURITY_REPORT.md that captures vulnerabilities, risk exposure, and actionable mitigations for a project.

Core Features & Use Cases

  • Phase-driven security appraisal that validates scope, performs attack analysis, and designs defense measures.
  • Generates a deterministic SECURITY_REPORT.md at the project root, including executive summary, discovered vulnerabilities, attack scenarios, and recommended mitigations.
  • Suitable for pre-release security checks, compliance reviews, and ongoing security governance across code, configurations, and infrastructure.

Quick Start

Coordinate black-hacker and white-hacker to generate a SECURITY_REPORT.md for the target project.

Frequently Asked Questions about security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a red team and blue team security audit for a software project?

A coordinated security audit applies red team attack analysis and blue team defense design to your project. This process validates scope, discovers vulnerabilities, and outputs a standardized SECURITY_REPORT.md with mitigations at the project root.

What is included in a pre-release security risk assessment report?

A pre-release security risk assessment report includes an executive summary, discovered vulnerabilities, potential attack scenarios, and recommended remediation items. It comprehensively reviews code, configurations, and infrastructure to ensure formal compliance.

When do I need a formal vulnerability check and risk assessment for my codebase?

You need a formal vulnerability check and risk assessment during pre-release security checks, compliance reviews, or ongoing security governance. It identifies risk exposure across code, configurations, and infrastructure before deployment.

Can I use this security audit for infrastructure and configuration reviews?

Yes, this security audit applies to infrastructure and configuration reviews alongside code analysis. It performs a phase-driven appraisal to validate scope, execute attack scenarios, and design defense measures for comprehensive risk mitigation.

What is the best way to generate a standardized security report for compliance reviews?

The best way to generate a standardized security report for compliance reviews is coordinating black-hacker and white-hacker assessments. This deterministic, multi-phase workflow produces a unified SECURITY_REPORT.md capturing vulnerabilities and actionable mitigations.

Does the security audit workflow require external dependencies or components?

No, the security audit workflow operates without external dependencies or components. It independently coordinates the attack and defense assessments to deliver the final security report directly at your project root.