skills.rest
lshtram
lshtramCOMMUNITY
Explore all skills by this author →
GitHub

security-audit

Identify and remediate software vulnerabilities using OWASP guidelines and STRIDE threat modeling.

Updated Jan 21, 2026
Search Tags:#security#owasp#risk-assessment#threat-modeling#code-review#red-team
One-click install
npx skills add https://github.com/lshtram/core_dev --skill security-audit-lshtram
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-audit
Source: https://github.com/lshtram/core_dev/tree/main/.agent/skills/security-audit
Command: npx skills add https://github.com/lshtram/core_dev --skill security-audit-lshtram

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Identify and remediate security vulnerabilities by thinking like an attacker and following OWASP standards to reduce risk.

Core Features & Use Cases

  • Surface Attack Surface: Identify all Entry Points (API, Forms, URL params).
  • Threat Modeling: Apply STRIDE to systematically assess risks.
  • Code Review: Audit for Injection, Broken Auth, and Sensitive Data Exposure.
  • Remediation Guidance: Propose concrete fixes such as input sanitization, validation, and encryption.
  • Use Case: Security teams planning red-team exercises or reviewing a codebase for security weaknesses.

Quick Start

Conduct an adversarial security audit by mapping entry points, applying STRIDE, and proposing OWASP-aligned fixes.

Frequently Asked Questions about security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I identify security vulnerabilities in my web application codebase?▼

Identify security vulnerabilities by mapping entry points like APIs and URL parameters, then applying STRIDE threat modeling and OWASP guidelines to surface injection flaws and data exposures for remediation.

What is the best way to apply STRIDE threat modeling to an API?▼

STRIDE threat modeling systematically assesses API risks by categorizing threats like spoofing, tampering, and information disclosure across all entry points to ensure structured vulnerability discovery.

Can I use OWASP guidelines to find broken authentication and injection flaws during code review?▼

Yes, you can use OWASP guidelines during code review to audit for broken authentication, injection vulnerabilities, and sensitive data exposure across your software systems.

How do I structure remediation recommendations for sensitive data exposure?▼

Structure remediation recommendations by proposing concrete fixes such as input sanitization, data validation, and encryption to directly address sensitive data exposure and reduce system risk.

Does adversarial security audit work for planning red-team exercises?▼

Yes, adversarial security audits work for planning red-team exercises by applying attacker thinking and standardized reporting to surface attack surfaces and assess risks before execution.

Related Skills

Explore More Software Engineering Skills→
ricardoo022ricardoo022

scan-fase-1

Identify configurations, secrets, and attack-surface exposure from JS-bundled web applications.

Community
Advanced
ArabelaTsoArabelaTso
142

exploitability-analyzer

Analyze control flow and sanitization to assess vulnerability exploitability.

Community
Advanced
zangxin75zangxin75

security

Assess vulnerabilities and review code against OWASP Top 10 standards.

Community
Advanced
BagelHoleBagelHole
46

dast-scanning

Perform DAST scans on web applications and APIs with OWASP ZAP.

Community
Intermediate