Automate security audits, threat modeling, and vulnerability assessments for code.
npx skills add https://github.com/ivegamsft/work-tracker --skill security-ivegamsft
Please help me install this Agent Skill. Skill: security Source: https://github.com/ivegamsft/work-tracker/tree/main/.agents/skills/security Command: npx skills add https://github.com/ivegamsft/work-tracker --skill security-ivegamsft
This Skill provides a comprehensive suite of tools for security audits, threat modeling, vulnerability assessments, and dependency reviews, enabling developers and security analysts to ensure their applications are secure.
Apply the security skill. Use the OWASP checklist and STRIDE threat model template to the modules being audited.
High-intent search queries and answers about installing and using this skill.
To conduct a security audit, apply automated checklists like the OWASP Top 10 to review your application components. This process scans for hardcoded secrets, evaluates dependency manifests, and generates documented vulnerability findings.
STRIDE threat modeling is a framework for identifying security threats like spoofing and repudiation. It applies to vulnerability assessments by systematically categorizing threats across application components to ensure comprehensive threat coverage.
Yes, you can use bash, git, and grep to scan for hardcoded secrets in your dependencies. The process requires these standard tools to search codebases and dependency manifests, documenting any exposed secrets found during the review.
This vulnerability assessment approach works without external scanners by relying on standard command-line utilities. It utilizes bash, git, grep, and find to perform localized code reviews and dependency checks directly within your environment.
The best way to review dependencies for security vulnerabilities is to analyze dependency manifests using automated scripts. This process identifies outdated or compromised packages, checks for hardcoded secrets, and documents the findings in a report template.
You should not use automated threat modeling when your application relies on proprietary logic requiring manual architectural review. Automated processes using grep and find excel at pattern matching but may miss complex, context-specific business logic vulnerabilities.
habrahgithubAudit codebase changes, auth boundaries, secrets, and dependencies for security risks.
matteocervelliAssess software vulnerabilities with CVSS scoring and remediation planning.
auxi-wardrobeDetect security vulnerabilities, hardcoded secrets, and dependency issues in codebases.
robotijnScan source code for security vulnerabilities across multiple programming languages.
