senior-security

Automate threat modeling, security auditing, and penetration testing workflows with Python scripts.

Updated Jul 7, 2026
One-click install
npx skills add https://github.com/singhaganesh/Urban-assist --skill senior-security-singhaganesh
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: senior-security
Source: https://github.com/singhaganesh/Urban-assist/tree/main/.cursor/skills/senior-security
Command: npx skills add https://github.com/singhaganesh/Urban-assist --skill senior-security-singhaganesh

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve? Security assessments like threat modeling, code auditing, and penetration testing are time-consuming and inconsistent when done manually. This Skill provides structured automation scripts and reference guides to standardize security engineering work across projects. ## Core Features & Use Cases - Threat Modeler: Run scripts/threat_modeler.py against a project path to scaffold and analyze threat models with verbose or JSON output. - Security Auditor: Execute scripts/security_auditor.py on a target directory to perform automated security analysis and generate findings reports. - Pentest Automator: Use scripts/pentest_automator.py to automate penetration testing tasks with configurable arguments and JSON export. - Reference Guides: Consult references/ for security architecture patterns, penetration testing workflows, and cryptography implementation guidance. - Use Case: Before shipping a new web app, run the security auditor against the codebase, review the findings report, then follow the cryptography implementation reference to fix identified weaknesses. ## Quick Start Ask the AI to run the security auditor script against your project directory and summarize the findings report.

Frequently Asked Questions about senior-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a security audit on my codebase with Python?

Run scripts/security_auditor.py with the target path as an argument, for example: python scripts/security_auditor.py ./my-project --verbose. The script validates the target, performs analysis, and prints a findings report, with an optional --json flag for machine-readable output.

How to automate threat modeling for an application?

Use scripts/threat_modeler.py by passing your project path: python scripts/threat_modeler.py <project-path>. It scaffolds the threat modeling process and outputs results, which you can export to a file using the --output option combined with --json.

What Python dependencies does the security automation require?

The scripts use only Python standard library modules: os, sys, json, argparse, pathlib, and typing. No pip installation of third-party packages is required, so they run in any standard Python 3 environment.

Can I export security audit results as JSON?

Yes, all three scripts support a --json flag to format results as JSON and an --output option to write them to a file. This makes it straightforward to feed findings into CI pipelines or reporting dashboards.

What are the limitations of automated penetration testing scripts?

Automated scripts provide scaffolding and standardized analysis but cannot replace manual exploitation techniques or business-logic testing. Use the references/penetration_testing_guide.md for full manual workflows and treat script output as a starting point for deeper review.