security-auditing

Identify and mitigate security vulnerabilities in system designs and data flows.

1|Updated Jan 20, 2026

Search Tags:#security #compliance #auditing #risk-assessment #threat-modeling #zero-trust #duke-verified

Ready to run

npx skills add https://github.com/profmikegreene/gotei --skill security-auditing-profmikegreene

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-auditing
Source: https://github.com/profmikegreene/gotei/tree/main/Gotei_Skills/security-auditing
Command: npx skills add https://github.com/profmikegreene/gotei --skill security-auditing-profmikegreene

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Identifies and mitigates security vulnerabilities in system designs, data flows, and controls across pilot architectures and integrations.

Core Features & Use Cases

Threat modeling and risk assessment during design reviews to align with Zero-Trust and Duke Verified policies.
Penetration assessment guidance, security controls mapping, and compliance checks for new integrations.
Use Case: When assessing a pilot architecture, generate a prioritized list of mitigations and a compliance alignment report.

Quick Start

Run a threat-modeling review on a pilot architecture and generate a prioritized risk report.

Frequently Asked Questions about security-auditing

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I perform threat modeling on a pilot architecture?▼

Threat modeling on pilot architectures identifies security vulnerabilities in system designs and data flows. The process generates a prioritized list of mitigations and a compliance alignment report mapping to Zero-Trust and Duke Verified.

What is structured threat modeling and risk assessment for system designs?▼

Structured threat modeling and risk assessment is a security auditing technique that identifies and mitigates vulnerabilities in system designs. It applies risk scoring and policy alignment to ensure new integrations meet Zero-Trust requirements.

Can I generate a compliance alignment report for Zero-Trust and Duke Verified policies?▼

Yes, you can generate a compliance alignment report for Zero-Trust and Duke Verified policies. The security audit maps system controls and data flows against these policies to produce a prioritized list of required mitigations.

How do I assess security vulnerabilities in new integrations and data flows?▼

Assessing security vulnerabilities in new integrations requires penetration assessment guidance and security controls mapping. The audit identifies weaknesses in data flows and generates mitigations aligned with compliance frameworks like Duke Verified.

Does this security auditing approach work for Zero-Trust architectures?▼

Yes, this security auditing approach works for Zero-Trust architectures by mapping controls and data flows against Zero-Trust policies. It ensures pilot architectures meet strict compliance requirements through structured threat modeling and risk scoring.

What are the limitations of automated risk scoring in security audits?▼

Automated risk scoring in security audits is limited to identifying and mitigating known vulnerability patterns in system designs. It requires accurate architecture inputs to generate reliable compliance alignment reports and prioritized mitigation lists.