security-engineer

To audit a codebase for security vulnerabilities, the Skill scans code, config files, and dependencies to identify insecure patterns. It returns structured findings with precise locations, evidence, severity levels, and concrete remediation guidance.

Yes, you can automate dependency scanning and threat modeling in CI/CD pipelines. The Skill applies security audits across typical software projects and headless agent workflows to detect vulnerabilities and misconfigurations automatically.

The best way to get actionable remediation guidance is through a structured security audit that outputs specific snippets or config changes. This Skill provides prioritized fixes alongside exact vulnerability locations and evidence from the provided context.

Yes, a code review security audit works on configuration files and dependencies. The Skill applies its audit across code, config files, and dependencies to identify misconfigurations, insecure patterns, and known vulnerabilities.

To identify exact locations of vulnerabilities during a security audit, the Skill scans the provided context and returns structured findings. These findings pinpoint precise locations within the codebase and include supporting evidence.