security
Provides tools for security audits and threat modeling.
Install
mkdir -p .claude/skills/security-ivegamsft && curl -L -o skill.zip "https://agentskills.codes/api/skills/download/15838" && unzip -o skill.zip -d .claude/skills/security-ivegamsft && rm skill.zipInstalls to .claude/skills/security-ivegamsft
Activation
This is the description your AI agent reads to decide when to run this skill — the better it matches your request, the more reliably it fires.
Use when performing security audits, threat modeling, vulnerability assessments, or dependency reviews. Provides OWASP checklists, STRIDE templates, vulnerability report structures, and dependency audit formats.Key capabilities
- →Perform an OWASP Top 10 review on an application
- →Conduct STRIDE threat modeling for new features or architecture changes
- →Scan for hardcoded secrets or credentials in source code
- →Audit dependency manifests for known vulnerabilities
- →Document security findings in a structured vulnerability report
- →Review code for secure coding compliance
How it works
The skill provides templates for OWASP checklists, STRIDE threat models, vulnerability reports, and dependency audits to guide security assessments.
Inputs & outputs
When to use security
- →Perform owasp top 10 review
- →Create stride threat model
- →Audit dependency cves
About this skill
Security Skill
Use this skill when the task involves auditing code for security vulnerabilities, modeling threats, reviewing dependencies for known CVEs, or enforcing secure coding standards.
When to Use
- Performing an OWASP Top 10 review on an application
- Conducting STRIDE threat modeling for a new feature or architecture change
- Scanning for hardcoded secrets or credentials in source code
- Auditing dependency manifests for known vulnerabilities
- Documenting security findings in a structured vulnerability report
- Reviewing code for secure coding compliance
How to Invoke
Reference this skill by attaching skills/security/SKILL.md to your agent context, or instruct the agent:
Use the security skill. Apply the OWASP checklist and STRIDE threat model template to the modules being audited.
Templates in This Skill
| Template | Purpose |
|---|---|
owasp-checklist.md | OWASP Top 10 evaluation checklist with pass/fail tracking per category |
stride-threat-model-template.md | STRIDE threat modeling template for enumerating and rating threats per component |
vulnerability-report-template.md | Structured vulnerability report for compiling all findings with severity ratings |
dependency-audit-template.md | Dependency audit template for documenting CVEs, affected packages, and remediation |
Agent Pairing
This skill is designed to be used alongside the security-analyst agent. The agent drives the audit workflow; this skill provides the reference templates and checklists.
For backend-specific security concerns, pair with the backend-dev agent's security defaults. For frontend-specific concerns (CSP, XSS, CORS), pair with the frontend-dev agent.
Related Guardrails
- Security Findings Triage — SLA-based triage process for severity classification, ownership, and remediation tracking
When not to use it
- →When the task does not involve security audits
- →When the task does not involve threat modeling
- →When the task does not involve vulnerability assessments
Limitations
- →The skill provides templates for OWASP Top 10 evaluation
- →The skill provides templates for STRIDE threat modeling
- →The skill provides templates for vulnerability reports
How it compares
This skill offers structured templates and checklists for security assessments, providing a standardized and systematic approach compared to ad-hoc security reviews.
Compared to similar skills
security side by side with the closest alternatives in the catalog.
| Skill | Installs | Updated | Safety | Difficulty |
|---|---|---|---|---|
| security (this skill) | 0 | 3mo | No flags | Intermediate |
| senior-security | 31 | 7mo | Review | Advanced |
| fix-security-vulnerability | 7 | 2mo | Review | Intermediate |
| codebase-cleanup-deps-audit | 2 | 4mo | No flags | Intermediate |
Try saying
Example prompts that trigger this skill in your AI assistant.
More by ivegamsft
View all by ivegamsft →You might also like
senior-security
davila7
Comprehensive security engineering skill for application security, penetration testing, security architecture, and compliance auditing. Includes security assessment tools, threat modeling, crypto implementation, and security automation. Use when designing security architecture, conducting penetration tests, implementing cryptography, or performing security audits.
fix-security-vulnerability
getsentry
Analyze and propose fixes for Dependabot security alerts
codebase-cleanup-deps-audit
sickn33
You are a dependency security expert specializing in vulnerability scanning, license compliance, and supply chain security. Analyze project dependencies for known vulnerabilities, licensing issues, outdated packages, and provide actionable remediation strategies.
dependency-auditor
alirezarezvani
Check dependencies for known vulnerabilities using npm audit, pip-audit, etc. Use when package.json or requirements.txt changes, or before deployments. Alerts on vulnerable dependencies. Triggers on dependency file changes, deployment prep, security mentions.
security-scanning-security-dependencies
sickn33
You are a security expert specializing in dependency vulnerability analysis, SBOM generation, and supply chain security. Scan project dependencies across ecosystems to identify vulnerabilities, assess risks, and recommend remediation.
trivy-offline-vulnerability-scanning
benchflow-ai
Use Trivy vulnerability scanner in offline mode to discover security vulnerabilities in dependency files. This skill covers setting up offline scanning, executing Trivy against package lock files, and generating JSON vulnerability reports without requiring internet access.