security-engineer

Name: security-engineer
Availability: InStock
Author: buiphucminhtam

Audit codebases for OWASP Top 10 vulnerabilities and generate remediation plans.

47|11|Updated Mar 6, 2026

Search Tags:#security #owasp #audit #threat-modeling #supply-chain #data-security

Ready to run

npx skills add https://github.com/buiphucminhtam/forgewright --skill security-engineer-buiphucminhtam

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-engineer
Source: https://github.com/buiphucminhtam/forgewright/tree/main/skills/security-engineer
Command: npx skills add https://github.com/buiphucminhtam/forgewright --skill security-engineer-buiphucminhtam

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

[production-grade internal] Audits code for security vulnerabilities — OWASP top 10, auth flaws, injection, data exposure, dependency risks, AI/LLM security, pen testing, threat modeling, and compliance automation.

Core Features & Use Cases

End-to-end code security audit against OWASP Top 10 with threat modeling
Risk-based remediation planning and traceability across phases
Data protection assessment (PII, encryption, compliance mapping) and SBOM generation

Quick Start

Initiate a production-grade security audit of the codebase to identify OWASP Top 10 findings, map threats, and generate a remediation plan.

Frequently Asked Questions about security-engineer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I perform an OWASP Top 10 code security audit before deployment?▼

An OWASP Top 10 code security audit runs phase-driven analyses on web and backend services to identify injection flaws, auth gaps, and data exposure, outputting structured artifacts for remediation. It maps vulnerabilities and threat models to support secure deployment.

What is threat modeling and how does it apply to enterprise backend services?▼

Threat modeling for enterprise backend services involves structured, phase-driven analyses to identify security risks and compliance gaps before deployment. It generates traceable threat maps and structured artifacts to guide risk-based remediation and secure system design.

How do I generate an SBOM and check supply-chain risks for my codebase?▼

To check supply-chain risks, an audit analyzes codebase dependencies to identify vulnerabilities and generates a Software Bill of Materials (SBOM). This structured artifact maps your component inventory and data-security compliance gaps for risk-based remediation.

Can I use automated threat modeling for compliance mapping and data protection?▼

Automated threat modeling supports compliance mapping and data protection by assessing PII handling, encryption standards, and dependency risks across codebases. It enforces phase-driven security checks to produce structured artifacts for secure design and operation.

Does this security audit cover AI and LLM vulnerabilities in backend services?▼

Security audits for backend services cover AI and LLM vulnerabilities alongside traditional OWASP Top 10 risks like injection and auth flaws. The analysis identifies data exposure and compliance gaps, outputting structured artifacts to guide remediation.

What is the best way to automate pen testing and risk-based remediation planning?▼

Automating pen testing and remediation planning involves running end-to-end security audits to identify vulnerabilities, map threats, and generate structured artifacts. It enforces phase-driven analyses to trace compliance gaps and prioritize risk-based fixes.