start

Analyze a software project's tech stack and recommend prioritized security tools.

12|1|Updated Feb 9, 2026

Search Tags:#code analysis #security #vulnerability #assessment #appsec #risk

Ready to run

npx skills add https://github.com/florianbuetow/claude-code --skill start-florianbuetow

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: start
Source: https://github.com/florianbuetow/claude-code/tree/main/plugins/appsec/skills/start
Command: npx skills add https://github.com/florianbuetow/claude-code --skill start-florianbuetow

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill provides a comprehensive security assessment of a software project, identifying potential risks and recommending specific security tools to address them.

Core Features & Use Cases

Automated Security Audit: Scans project manifests, code patterns, and installed tools to build a security profile.
Prioritized Recommendations: Suggests the most relevant security tools and their order of execution based on project specifics.
Use Case: Before deploying a new web application, run this Skill to get a clear roadmap of which security checks (e.g., secret scanning, dependency vulnerability checks, code analysis) are most critical for your specific tech stack and data handling.

Quick Start

Use the start skill to assess the security of the current project.

Frequently Asked Questions about start

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I assess my software project's security posture before deployment?▼

To assess project security posture, run an automated audit that scans the tech stack, data sensitivity, architecture, and installed security scanners to identify potential risks. This generates a prioritized list of recommended security tools tailored to your specific project.

What is the best way to identify which security vulnerability scanners I need?▼

The best way to identify needed vulnerability scanners is to analyze your project manifests, code patterns, and data handling practices. This evaluation matches your specific tech stack and architecture with prioritized AppSec tools and their execution order.

Can I get code analysis and risk assessment recommendations in JSON format?▼

Yes, you can get code analysis and risk assessment recommendations in JSON format. The security assessment supports JSON, Markdown, and plain text output formats to provide a prioritized roadmap of recommended security tools.

Does an automated security audit work for any tech stack and data sensitivity level?▼

An automated security audit works by analyzing your specific tech stack and data sensitivity to build a custom security profile. It evaluates installed security scanners and recommends appropriate code analysis, secret scanning, and dependency vulnerability checks.

How are the recommended security tools prioritized during an AppSec assessment?▼

During an AppSec assessment, recommended security tools are prioritized based on your project specifics, including data sensitivity and architecture. The assessment provides a clear execution order for checks like dependency vulnerability scanning and secret detection.