sparkfinderoven-r01-security-compliance-skills

To run an OWASP scan, initiate the task against your project directory to automatically identify Top-10 vulnerabilities. The scan provides CVSS-aware remediation guidance and outputs structured JSON reports for faster fixes.

Yes, you can generate GDPR and SOC 2 compliance audits automatically. The tool maps your project's data handling and evaluates readiness across SOC 2 criteria, outputting structured audit-ready reports for compliance analysis.

CVE detection scans your project dependencies to find known vulnerabilities and suggests upgrade paths. This provides deterministic results suitable for CI gating to prevent vulnerable dependencies from merging.

The best way to create a STRIDE threat model is to trigger the automated generation workflow. It produces structured STRIDE threat models and simultaneously generates structured incident response playbooks for breach procedures.

IAM least-privilege auditing evaluates your roles to identify over-permissioned access. Simultaneously, secret detection scans your codebase using entropy and pattern checks to locate and report exposed secrets.

Yes, YAML frontmatter-defined discovery is required to configure the automated security and compliance workflows. This setup supports deterministic scripting hooks and ensures structured outputs for scanning, auditing, and workflow orchestration.