How do I install the Adversarial Security skill?

Run npx skillmds@latest add gonzalezpazmonica/adversarial-security in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

What does the Adversarial Security skill do?

Subagent Scope Guard It is listed under Security on SkillMD.

Is Adversarial Security safe to use?

This skill has not completed SkillMD's automated safety review yet. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Adversarial Security?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Adversarial Security free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Adversarial Security?

gonzalezpazmonica (@gonzalezpazmonica) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Adversarial Security by gonzalezpazmonica

Name: Adversarial Security
Author: gonzalezpazmonica

File contents

Subagent Scope Guard

If you were dispatched as a subagent to execute a specific delegated task, skip this skill's full orchestration workflow. Execute only the assigned task, report result (DONE / DONE_WITH_CONCERNS / BLOCKED), and return. This guard prevents runaway skill activation in nested agent contexts.

Adversarial Security Skill

§0 Prerequisitos (gate de arranque)

Doble opt-in (SPEC-186):                     → si no: ❌ ABORT
  bash scripts/savia-double-optin-check.sh \
    --skill adversarial-security --confirm-autonomous
Requiere AMBOS: ADVERSARIAL_SECURITY_ENABLED=true Y flag explicito.

§1 Vulnerability Scoring

CVSS simplificado para proyectos internos:

Factor	Peso	Valores
Attack Vector	0.3	Network (1.0), Adjacent (0.7), Local (0.5), Physical (0.2)
Complexity	0.2	Low (1.0), High (0.5)
Privileges	0.2	None (1.0), Low (0.6), High (0.3)
Impact	0.3	High (1.0), Medium (0.6), Low (0.3)

score = sum(factor × peso) × 10 → escala 0-10

§2 STRIDE Mapping

Categoría	Pregunta clave	Controles típicos
Spoofing	¿Puedo suplantar a otro?	Auth, MFA, tokens
Tampering	¿Puedo modificar datos?	Integridad, signing, HMAC
Repudiation	¿Puedo negar una acción?	Audit logs, timestamps
Info Disclosure	¿Puedo acceder a datos?	Encryption, access control
DoS	¿Puedo tumbar el servicio?	Rate limiting, WAF
Elevation	¿Puedo escalar privilegios?	RBAC, least privilege

§3 OWASP Top 10 Checklist

Broken Access Control
Cryptographic Failures
Injection
Insecure Design
Security Misconfiguration
Vulnerable Components
Auth Failures
Software/Data Integrity Failures
Logging Failures
SSRF

§4 Dependency Audit

# npm: audit de dependencias
npm audit --json 2>/dev/null | jq '.vulnerabilities | length'
# pip: safety check
pip-audit --format=json 2>/dev/null
# dotnet: audit
dotnet list package --vulnerable --format json 2>/dev/null

§5 Security Score Formula

score = 100 - (critical×25 + high×10 + medium×3 + low×1) Cada fix verificado recupera los puntos. Floor: 0.

---name: adversarial-securitydescription: Subagent Scope Guard---## Subagent Scope Guard> If you were dispatched as a subagent to execute a specific delegated task,> **skip this skill's full orchestration workflow**. Execute only the assigned> task, report result (DONE / DONE_WITH_CONCERNS / BLOCKED), and return.> This guard prevents runaway skill activation in nested agent contexts.# Adversarial Security Skill## §0 Prerequisitos (gate de arranque)```Doble opt-in (SPEC-186): → si no: ❌ ABORT bash scripts/savia-double-optin-check.sh \ --skill adversarial-security --confirm-autonomousRequiere AMBOS: ADVERSARIAL_SECURITY_ENABLED=true Y flag explicito.```## §1 Vulnerability Scoring**CVSS simplificado para proyectos internos**:| Factor | Peso | Valores ||--------|------|---------|| Attack Vector | 0.3 | Network (1.0), Adjacent (0.7), Local (0.5), Physical (0.2) || Complexity | 0.2 | Low (1.0), High (0.5) || Privileges | 0.2 | None (1.0), Low (0.6), High (0.3) || Impact | 0.3 | High (1.0), Medium (0.6), Low (0.3) |score = sum(factor × peso) × 10 → escala 0-10## §2 STRIDE Mapping| Categoría | Pregunta clave | Controles típicos ||-----------|---------------|-------------------|| Spoofing | ¿Puedo suplantar a otro? | Auth, MFA, tokens || Tampering | ¿Puedo modificar datos? | Integridad, signing, HMAC || Repudiation | ¿Puedo negar una acción? | Audit logs, timestamps || Info Disclosure | ¿Puedo acceder a datos? | Encryption, access control || DoS | ¿Puedo tumbar el servicio? | Rate limiting, WAF || Elevation | ¿Puedo escalar privilegios? | RBAC, least privilege |## §3 OWASP Top 10 Checklist1. Broken Access Control2. Cryptographic Failures3. Injection4. Insecure Design5. Security Misconfiguration6. Vulnerable Components7. Auth Failures8. Software/Data Integrity Failures9. Logging Failures10. SSRF## §4 Dependency Audit```bash# npm: audit de dependenciasnpm audit --json 2>/dev/null | jq '.vulnerabilities | length'# pip: safety checkpip-audit --format=json 2>/dev/null# dotnet: auditdotnet list package --vulnerable --format json 2>/dev/null```## §5 Security Score Formulascore = 100 - (critical×25 + high×10 + medium×3 + low×1)Cada fix verificado recupera los puntos. Floor: 0.

Frequently asked questions

Adversarial Security