Identify codebase vulnerabilities using STRIDE and OWASP threat modeling.
npx skills add https://github.com/vanducng/skills --skill security-vanducng
Please help me install this Agent Skill. Skill: security Source: https://github.com/vanducng/skills/tree/main/skills/security Command: npx skills add https://github.com/vanducng/skills --skill security-vanducng
Threat-modeled security audits that apply STRIDE + OWASP lens to surface vulnerabilities from multiple attacker perspectives, with optional red-team discovery and autoresearch-style fix loops for authorized remediation.
Audit the defined code scope with STRIDE×OWASP and generate a severity-ranked findings report.
High-intent search queries and answers about installing and using this skill.
To perform a STRIDE threat model security audit, this Skill applies the OWASP lens across your defined code scope to identify vulnerabilities and rank findings by severity. It structures the analysis from multiple attacker perspectives.
Yes, you can use red-team discovery loops for automated remediation guidance. This Skill supports iterative discovery and autoresearch-style fix loops, provided the engagement is strictly authorized.
The best way to prevent secret leakage during a security code review is using credential masking. This Skill includes safe reporting capabilities to ensure credentials remain masked throughout PoCs and structured reports.
Yes, this threat modeling approach works for a full repository scope. You can apply the STRIDE and OWASP analysis across a defined scope or the entire repository to generate a comprehensive severity-ranked findings report.
You should not use automated red-team engagements for security audits when you lack explicit authorization. This Skill strictly requires authorized access for red-team discovery and autoresearch-style fix loops.
bigeasyfreemanAutomate STRIDE threat modeling and OWASP Top 10 scanning on code changes before merging.
DatTran26Performs a structured STRIDE and OWASP security audit on codebases, configurations, and dependencies.
LuisSambranoPerform systematic code review and static analysis across multiple programming languages.
AI-SafeterAudit code, CI/CD pipelines, and deployments for DevSecOps security gaps.
