skills.rest
UnitOneAI
UnitOneAIOFFICIAL
Explore all skills by this author →
WebsiteGitHub

security-engineer

Orchestrate security engineering workflows for code review, pipeline hardening, and CVE triage.

44|128|Updated Mar 6, 2026
Search Tags:#security engineering#dependency scanning#secure code review#infrastructure security#vulnerability triage#cicd hardening#sast configuration
One-click install
npx skills add https://github.com/UnitOneAI/SecuritySkills --skill security-engineer-unitoneai
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-engineer
Source: https://github.com/UnitOneAI/SecuritySkills/tree/main/roles/security-engineer
Command: npx skills add https://github.com/UnitOneAI/SecuritySkills --skill security-engineer-unitoneai

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

It eliminates one-off, inconsistent security guidance by orchestrating role-based engineering workflows that map findings to verifiable controls and produce actionable remediation plans.

Core Features & Use Cases

  • Structured engagement sequences: Runs the right workflow for code review, pipeline hardening, vulnerability response, or infrastructure review so outputs stay consistent across runs.
  • Framework-grounded assessments: Classifies findings using trusted frameworks (e.g., OWASP ASVS, CWE Top 25, SLSA, CIS Benchmarks) to improve auditability and reduce hand-wavy results.
  • Remediation with feedback loops: Produces prioritized fixes and verification steps, including how to tune scanners and SAST based on what was actually confirmed.

Example: When a new feature introduces authentication and data-access changes, it sequences a secure code review, then dependency scanning, then SAST configuration updates so the next review catches the same bug class automatically.

Quick Start

Use the security-engineer role bundle to run a full security engineering workflow for a secure code review, including dependency scanning and SAST tuning, for your target repository or pull request.

Frequently Asked Questions about security-engineer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I make secure code review findings consistent and mapped to frameworks like OWASP ASVS?▼

CI/CD hardening applies structured engagement sequences to validate pipeline configurations against SLSA and CIS Benchmarks, generating prioritized fixes and verification steps for your infrastructure.

Can I automate vulnerability triage and patch planning for CVEs in my dependencies?▼

Vulnerability triage and patch planning run through structured engagement sequences that classify CVEs using framework-grounded assessments, producing prioritized fixes and verified remediations for your dependencies.

How do I configure SAST to automatically catch the same bug class in future pull requests?▼

SAST configuration updates follow secure code review and dependency scanning in a workflow sequence, tuning scanners based on confirmed findings so the next review catches the same bug class automatically.

Does this security engineering workflow require specific infrastructure security tools or dependencies?▼

The security engineering workflow operates without external dependencies, using injection-hardened, role-based sequencing of referenced skills to produce framework-mapped findings across your applications and environments.

What's the best way to validate infrastructure security across multiple environments consistently?▼

Infrastructure security validation uses structured engagement sequences to classify findings using trusted frameworks like CIS Benchmarks, ensuring consistent, audit-ready results and actionable remediation plans across environments.

Related Skills

Explore More Software Engineering Skills→
VSF-QC-TTSVSF-QC-TTS

common-git-collaboration

Enforce git collaboration best practices for commits, branches, pull requests, and security.

Official
Intermediate
kivo360kivo360
1

moai-domain-security

Mitigate security vulnerabilities in CI/CD pipelines using OWASP Top 10 and SAST/DAST workflows.

Community
Advanced
vladm3105vladm3105
16

security-audit

Identify security vulnerabilities across code, dependencies, infrastructure, and configurations.

Community
Advanced
zekiriabdzekiriabd
140

using-sddpro

Route software development requests through the SDDPro framework workflow.

Community
Advanced