security-engineer

Audit codebases for security vulnerabilities with static analysis and configuration reviews.

3|Updated Feb 25, 2026

Search Tags:#security #vulnerability #codebase #audit #threat-modeling #static-analysis #penetration-testing

Ready to run

npx skills add https://github.com/Basilisk-Systems/claude-toolkit --skill security-engineer-basilisk-systems

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-engineer
Source: https://github.com/Basilisk-Systems/claude-toolkit/tree/main/skills/security-engineer
Command: npx skills add https://github.com/Basilisk-Systems/claude-toolkit --skill security-engineer-basilisk-systems

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Active security analysis of codebases to identify vulnerabilities during development, enabling faster remediation and reduced risk.

Core Features & Use Cases

Reconnaissance, Static Analysis, Configuration Review, and Dependency Audit are combined to produce a comprehensive security assessment. Use cases include pre-commit scanning, CI pipeline security checks, IaC reviews, and threat modeling to harden applications.

Quick Start

Run an active security audit on the provided codebase and return a prioritized report of vulnerabilities with remediation steps.

Frequently Asked Questions about security-engineer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I perform a security audit on my codebase to identify vulnerabilities?▼

Perform a security audit by running reconnaissance, static analysis, configuration reviews, and dependency assessments. This process identifies vulnerabilities across modern stacks and returns structured findings with severity, location, and recommended fixes.

What is static analysis and how does it find security vulnerabilities in code?▼

Static analysis examines source code without executing it to locate security vulnerabilities. It enforces best practices like input validation and access control, generating actionable remediation guidance for identified flaws.

Can I use this security review for IaC reviews and CI pipeline security checks?▼

Yes, you can use it for IaC reviews and CI pipeline security checks. It supports pre-commit scanning and responds to security-review prompts or the /security-review command to harden applications during development.

What's the best way to audit dependencies for security risks in modern frameworks?▼

The best way to audit dependencies is through an automated dependency assessment. This evaluates your project's libraries against known security risks, producing a prioritized report of vulnerabilities with remediation steps.

Does this security audit generate a threat model for my application?▼

Yes, the security audit includes threat modeling to harden applications. It combines reconnaissance and configuration review to map potential threats and return structured findings with recommended fixes.

How do I remediate access control and secure configuration management issues?▼

Remediate access control and secure configuration management issues by following the generated actionable remediation guidance. The audit enforces these best practices and highlights specific locations requiring fixes.