security-audit

Security vulnerability identification uses static analysis (SAST), dependency scanning, and infrastructure-as-code assessment to detect weaknesses across code, libraries, containers, and cloud configurations. This Skill scans for these issues end-to-end and produces actionable remediation plans.

Yes. This Skill performs secret detection, validates security requirements against REQ documents, and runs compliance checks across CI/CD pipelines and cloud environments, integrating security validation into your deployment workflow.

Infrastructure-as-code and container security assessment evaluates Kubernetes manifests, container configurations, and cloud settings for misconfigurations and compliance violations. This Skill maps findings to regulatory standards and outputs security reports with remediation steps.

Threat modeling and risk assessment identify security risks by analyzing code, dependencies, and configurations to surface threats and their business impact. This Skill integrates threat analysis with vulnerability findings to prioritize remediation.

No prerequisite code review expertise is required. This Skill automates security code reviews by scanning for common vulnerabilities, misconfigurations, and compliance gaps, then surfaces findings in a format suitable for security and development teams.

SAST (Static Application Security Testing) analyzes source code for flaws; dependency scanning checks libraries for known vulnerabilities. This Skill performs both alongside secret detection and infrastructure assessment for comprehensive coverage across all attack surfaces.