Audit the Granit application with STRIDE threat modeling and CVSS-scored findings.
npx skills add https://github.com/granit-fx/granit-dotnet --skill security-granit-fx
Please help me install this Agent Skill. Skill: security Source: https://github.com/granit-fx/granit-dotnet/tree/main/.claude/skills/security Command: npx skills add https://github.com/granit-fx/granit-dotnet --skill security-granit-fx
This Skill provides a thorough security audit of the Granit application, addressing various aspects such as IAM, data protection, multi-tenancy, and infrastructure resilience.
/security full
High-intent search queries and answers about installing and using this skill.
Run a full security audit on your Granit application by applying STRIDE threat modeling and domain-specific analysis. This process identifies vulnerabilities, generates CVSS-scored findings, and suggests targeted remediation strategies.
STRIDE threat modeling categorizes application security risks across spoofing, tampering, repudiation, information disclosure, denial of service, and elevation of privilege. The audit translates these into CVSS-scored findings and a prioritized remediation roadmap.
Yes, a comprehensive application security audit covers multi-tenancy isolation and IAM configurations, including BFF, DPoP, and OIDC protocols. It also evaluates data protection, infrastructure resilience, and supply chain vulnerabilities.
Generate a GDPR and ISO 27001 gap analysis by running a comprehensive security audit that evaluates compliance controls alongside FAPI standards. The audit produces a prioritized remediation roadmap to address identified compliance gaps.
The best way to find input injection and deserialization vulnerabilities is through a domain-specific deep dive security audit. This process inspects cross-cutting concerns, cryptography, and HTTP security headers to identify and score vulnerabilities.
Yes, the security audit evaluates AI and MCP security risks alongside observability security and infrastructure resilience. It applies domain-specific analysis to identify vulnerabilities and suggest remediation strategies for these components.
ArdurAIEvaluate application and infrastructure security against best practices and threat models.
LerianStudioAutomate infrastructure security audits with phased scanning and compliance mapping.
moogieonAudit infrastructure security with Python scripts and external tools.
2389-researchReview changed files for security vulnerabilities, logic errors, and business-rule bugs before commits.
