skills.rest
cryborg1211
cryborg1211COMMUNITY
Explore all skills by this author →
GitHub

vc:security

Audit codebase security with STRIDE and OWASP analysis across Node.js, Python, and Go.

Updated May 10, 2026
Search Tags:#security#owasp#audit#stride#secret-detection#findings
One-click install
npx skills add https://github.com/cryborg1211/quant_trading_telegram_bot --skill vc-security
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: vc:security
Source: https://github.com/cryborg1211/quant_trading_telegram_bot/tree/main/.agents/skills/vc-security
Command: npx skills add https://github.com/cryborg1211/quant_trading_telegram_bot --skill vc-security

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Security vulnerabilities in codebases are often missed during development, leading to breaches, outages, and compliance risk.

Core Features & Use Cases

  • STRIDE + OWASP based audit that identifies, classifies, and prioritizes findings.
  • Optional iterative fixes via vc:autoresearch pattern for high-priority issues.
  • Generates a severity-ranked findings report and supports integration into CI/CD.

Quick Start

Run /vc:security <scope> to perform a STRIDE + OWASP security audit and generate a prioritized findings report.

Frequently Asked Questions about vc:security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a security audit on my Node.js or Python codebase?▼

Perform a security audit by specifying a scope to execute STRIDE + OWASP analysis across Node.js, Python, and Go stacks, which produces a severity-ranked findings report.

What does STRIDE analysis cover when reviewing code for vulnerabilities?▼

STRIDE analysis evaluates threat categories like spoofing, tampering, and information disclosure across your specified scope, mapping identified vulnerabilities to OWASP classifications and generating prioritized findings.

Can I use this for security checks after making payment or authentication changes?▼

Yes, the security audit is designed for pre-release reviews, post-authentication changes, payment modifications, and periodic security checks to validate codebase protections before deployment.

How are security findings prioritized and reported?▼

Findings are structured into a severity-ranked report that maps STRIDE and OWASP analysis results, supporting direct integration into CI/CD pipelines for continuous security validation.

Does the audit include dependency scanning and secret detection?▼

Yes, the audit methodology enforces dependency auditing and secret detection alongside STRIDE evaluation and OWASP mapping to comprehensively identify vulnerabilities across the specified scope.

What is the best way to fix high-priority security vulnerabilities found during an audit?▼

Apply iterative fixes for high-priority vulnerabilities using the guided research pattern, which automates remediation steps based on the severity-ranked findings report.

Related Skills

Explore More Software Engineering Skills→
balic-AI-ML-R-D-Resourcesbalic-AI-ML-R-D-Resources

security-audit-context-building

Map architecture, trust boundaries, and data flows for security audit scoping.

Official
Advanced
thesaifalitaithesaifalitai
8

test-master

Write and execute software tests for functionality, performance, and security.

Community
Advanced
AradotsoAradotso
11

sparkfinderoven-r01-security-compliance-skills

Automate security and compliance assessments across code, dependencies, and controls.

Official
Advanced
4lerman4lerman

senior-security

Perform STRIDE threat modeling and vulnerability analysis with Python scripts.

Community
Advanced