skills.rest
softwaresalt
softwaresaltCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

security-audit

Audit repository source and agentic configs for OWASP Top 10 and STRIDE risks.

1|Updated Oct 17, 2025
Search Tags:#threat modeling#security audit#stride#owasp top 10#remediation planning#repository scanning#config hygiene
One-click install
npx skills add https://github.com/softwaresalt/csv-managed --skill security-audit-softwaresalt
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-audit
Source: https://github.com/softwaresalt/csv-managed/tree/main/.github/skills/security-audit
Command: npx skills add https://github.com/softwaresalt/csv-managed --skill security-audit-softwaresalt

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

It identifies security weaknesses across your repository by scanning agentic configuration surfaces and application source code, producing a prioritized report you can act on safely.

Core Features & Use Cases

  • Multi-phase auditing: Performs discovery, deterministic config scanning, and optional OWASP Top 10 and STRIDE analysis to cover both code and threat model risk.
  • Mode-based safety controls: Supports report-only runs and a constrained fix mode that applies only Tier 1 deterministic config remediations.
  • Persisted, scored outputs: Generates a graded executive report with a security score, finding counts, and an ordered remediation priority list saved under docs/security.

Quick Start

Run a full report with: Invoke security-audit mode:report scope:full.

Frequently Asked Questions about security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a security audit on my repository source code?▼

Yes, it performs threat modeling by applying STRIDE analysis and scanning for OWASP Top 10 risks across your application source and agentic configuration surfaces. It produces a graded executive report with prioritized remediation planning.

Can I automatically fix security vulnerabilities found during repository scanning?▼

It evaluates configuration hygiene and repository-wide security by scanning agentic configuration surfaces, generating a graded security score, and counting findings. The persisted markdown report saves to your configured security docs directory.

What is the best way to generate an executive security report for application source?▼

No special dependencies are required to start auditing. You can run a full report immediately by invoking security-audit in report mode with the scope set to full, scanning configurable scopes and paths without extra setup.

Does this security audit tool support OWASP Top 10 and STRIDE analysis?▼

No special dependencies are required to start auditing. You can run a full report immediately by invoking security-audit in report mode with the scope set to full, scanning configurable scopes and paths without extra setup.

Are there limitations to automated remediation planning for config hygiene?▼

Yes, the security audit tool supports both OWASP Top 10 and STRIDE analysis to detect code and threat model risks. It performs multi-phase auditing across configurable scopes and paths to identify weaknesses.

Related Skills

Explore More Legal & Compliance Skills→
kenhiakenhia

atv-security

Automate security audits for GitHub projects by scanning source code for vulnerabilities.

Community
Advanced
changoo89changoo89
19

docs-verify

Validate 3-Tier documentation compliance for line limits, cross-references, and file counts.

Community
Advanced
bigeasyfreemanbigeasyfreeman
2

security-review

Automate STRIDE threat modeling and OWASP Top 10 scanning on code changes before merging.

Community
Advanced
brenordvbrenordv

security

Audit software systems for security vulnerabilities and regulatory compliance.

Community
Advanced