skills.rest
fabricioctelles
fabricioctellesCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

security-specialist

Identify, validate, and remediate exploitable security vulnerabilities in source code.

47|4|Updated Feb 21, 2026
Search Tags:#code review#threat modeling#penetration testing#remediation#security audit#application security#vulnerability scanning
One-click install
npx skills add https://github.com/fabricioctelles/skills --skill security-specialist-fabricioctelles
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-specialist
Source: https://github.com/fabricioctelles/skills/tree/main/skills/security-specialist
Command: npx skills add https://github.com/fabricioctelles/skills --skill security-specialist-fabricioctelles

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires dnspython, python-whois, bbot, python3-nmap, python-nmap, webtech, wapiti3, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps identify, validate, prioritize, and remediate real security vulnerabilities in source code, applications, and authorized live targets while reducing false positives and unsupported severity claims.

Core Features & Use Cases

  • Repository Security Audits: Performs reconnaissance, vulnerability hunting, adversarial validation, structured reporting, and independent verification across an entire codebase.
  • Focused Security Workflows: Supports diff reviews, threat modeling, attack-path tracing, vulnerability discovery, triage, remediation, fix validation, and finding tracking.
  • Authorized Penetration Testing: Provides passive and active reconnaissance, web enumeration, vulnerability scanning, controlled exploitation guidance, and evidence collection for localhost or explicitly authorized remote targets.
  • Evidence-Based Reporting: Records repo-relative locations, data-flow traces, concrete attack scenarios, severity rationale, confidence scores, remediation guidance, and validated JSON or HTML reports.

Quick Start

Ask the security-specialist skill to perform a full security audit of the specified repository and produce a validated report of confirmed exploitable findings.

Frequently Asked Questions about security-specialist

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a security audit of my source code to find exploitable vulnerabilities?▼

A security audit identifies and validates exploitable vulnerabilities by performing reconnaissance, vulnerability hunting, and adversarial validation across your codebase, producing evidence-backed reports with remediation guidance and confidence scores.

What is threat modeling and attack-path analysis in application security?▼

Threat modeling and attack-path analysis trace potential exploitation routes through an application's data flows, validating concrete attack scenarios and prioritizing remediation based on evidence-backed severity rationale rather than theoretical risks.

How do I set up penetration testing and vulnerability scanning for authorized targets?▼

Penetration testing of authorized targets requires installing dependencies like bbot, wapiti3, and python3-nmap to enable passive and active reconnaissance, web enumeration, controlled exploitation guidance, and evidence collection.

Does this vulnerability scanning approach work for code review diffs or only full repository audits?▼

Vulnerability scanning supports both full repository audits and focused security workflows, including diff reviews, vulnerability discovery, triage, fix validation, and finding tracking with persistent scan state and structured schema validation.

How are false positives reduced during vulnerability discovery and triage?▼

False positives are reduced through adversarial validation, independent verification of reported claims, evidence-based reporting with repo-relative locations, data-flow traces, and structured schema validation of confirmed exploitable findings.

Related Skills

Explore More Software Engineering Skills→
EntroVyxEntroVyx
3

wordpress-plugin-hunt

Identify WordPress plugins and versions via REST API, readme.txt, and HTML fingerprinting.

Community
Advanced
dnvitidnviti
10

vulnerability-create

Generate structured remediation tasks from security vulnerability findings with severity classification.

Community
Intermediate
SaturateSaturate

security-deep-dive

Analyze software security to identify vulnerabilities and attack surfaces.

Community
Advanced
dreadnodedreadnode
11

vuln-critic

Filter low-quality and false positive vulnerability findings from scanners and agent output.

Official
Intermediate