Identify security weaknesses in codebases through a four-phase audit workflow.
npx skills add https://github.com/mswell/dotfiles --skill security-audit-mswell
Please help me install this Agent Skill. Skill: security-audit Source: https://github.com/mswell/dotfiles/tree/main/setup/Skills/security-audit Command: npx skills add https://github.com/mswell/dotfiles --skill security-audit-mswell
Security teams and developers need a structured way to identify, analyze, and document security issues across complex codebases. This Skill provides a repeatable, multi-phase workflow that yields concrete, evidence-backed findings and a comprehensive report.
Run a full security audit on your codebase to generate the threat model and vulnerability report.
High-intent search queries and answers about installing and using this skill.
A security audit identifies vulnerabilities through a four-phase workflow: Assessment, Threat Model, Code Review, and Report. It uncovers authentication, input validation, data-flow, dependency, and configuration issues, producing an actionable report for remediation.
STRIDE-based threat modeling categorizes security threats across diverse stacks like web apps and microservices. It analyzes data-flow and authentication risks to validate findings with evidence, outputting structured artifacts like THREAT_MODEL.json for hardening tasks.
The best way to generate a vulnerability report for an API is an automation-friendly workflow that produces SECURITY.md, VULNERABILITIES.json, and scan_report.md. It uses scripted detection and evidence-based validation to deliver actionable remediation guidance.
Yes, this security review workflow applies across diverse stacks including cloud-native services and microservices. It requires scripted detection and code review to uncover configuration and dependency issues specific to those environments.
Running a codebase security review produces concrete, evidence-backed artifacts including SECURITY.md, THREAT_MODEL.json, VULNERABILITIES.json, and scan_report.md. These files document identified weaknesses and provide actionable remediation guidance for compliance.
Threat modeling and code review are needed for vulnerability reporting because they validate findings with concrete evidence. This structured approach ensures that authentication and input validation issues are accurately documented for bug bounty and hardening tasks.
oto1720Identify security vulnerabilities in multi-language codebases and generate a security-review report.
korchasaOrchestrate SDLC pipelines with role-specific subagents and validation hooks.
prof-danielcRun static analysis tools and aggregate results into a prioritized issue report.
zangxin75Conduct security audits and code vulnerability reviews with SAST scans.
