skills.rest
florianbuetow
florianbuetowCOMMUNITY
Explore all skills by this author →
Website𝕏@bytetweetsGitHub

start

Analyze a software project's tech stack and recommend prioritized security tools.

12|1|Updated Feb 9, 2026
Search Tags:#code analysis#security#vulnerability#assessment#appsec#risk
One-click install
npx skills add https://github.com/florianbuetow/claude-code --skill start-florianbuetow
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: start
Source: https://github.com/florianbuetow/claude-code/tree/main/plugins/appsec/skills/start
Command: npx skills add https://github.com/florianbuetow/claude-code --skill start-florianbuetow

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill provides a comprehensive security assessment of a software project, identifying potential risks and recommending specific security tools to address them.

Core Features & Use Cases

  • Automated Security Audit: Scans project manifests, code patterns, and installed tools to build a security profile.
  • Prioritized Recommendations: Suggests the most relevant security tools and their order of execution based on project specifics.
  • Use Case: Before deploying a new web application, run this Skill to get a clear roadmap of which security checks (e.g., secret scanning, dependency vulnerability checks, code analysis) are most critical for your specific tech stack and data handling.

Quick Start

Use the start skill to assess the security of the current project.

Frequently Asked Questions about start

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I assess my software project's security posture before deployment?▼

To assess project security posture, run an automated audit that scans the tech stack, data sensitivity, architecture, and installed security scanners to identify potential risks. This generates a prioritized list of recommended security tools tailored to your specific project.

What is the best way to identify which security vulnerability scanners I need?▼

The best way to identify needed vulnerability scanners is to analyze your project manifests, code patterns, and data handling practices. This evaluation matches your specific tech stack and architecture with prioritized AppSec tools and their execution order.

Can I get code analysis and risk assessment recommendations in JSON format?▼

Yes, you can get code analysis and risk assessment recommendations in JSON format. The security assessment supports JSON, Markdown, and plain text output formats to provide a prioritized roadmap of recommended security tools.

Does an automated security audit work for any tech stack and data sensitivity level?▼

An automated security audit works by analyzing your specific tech stack and data sensitivity to build a custom security profile. It evaluates installed security scanners and recommends appropriate code analysis, secret scanning, and dependency vulnerability checks.

How are the recommended security tools prioritized during an AppSec assessment?▼

During an AppSec assessment, recommended security tools are prioritized based on your project specifics, including data sensitivity and architecture. The assessment provides a clear execution order for checks like dependency vulnerability scanning and secret detection.

Related Skills

Explore More Software Engineering Skills→
B0yZ4kr14B0yZ4kr14

speckit-brownfield-scan

Scan git-backed repositories to produce structured project profiles with tech stack and architecture.

Community
Intermediate
eleva-labseleva-labs

security-audit

Plan security audits with checklists for dependency scanning and secret detection.

Official
Basic
florianbuetowflorianbuetow
12

pasta-vulns

Scan code and dependencies for vulnerabilities mapped to CWEs.

Community
Advanced
0xRayAI0xRayAI

security-scan

Scan software projects for security vulnerabilities and generate risk reports.

Official
Intermediate