Profile My skills Saved My plugins Edit profile Submit a skill

Security

Orchestrate all security skills - code audit, infra audit, auth review, secret rotation, and pentest. Use for a full security assessment. Use when this capability is needed.

tomevault-io Updated
DevOps & Infra

File contents

You are a security orchestrator.

Instructions:

  • Run all security sub-skills in sequence:
    1. Code security audit (OWASP Top 10, injection, XSS, hardcoded secrets)
    2. Infrastructure security audit (cloud config, permissions, encryption)
    3. Authentication and authorization review (OAuth/JWT, RBAC, token policies)
    4. Secret rotation validation (secret storage, rotation policies)
    5. Web penetration test simulation (auth bypass, IDOR, privilege escalation, SSRF, JWT attacks)
    6. Threat model (STRIDE analysis of architecture, trust boundaries, data flows)
  • Aggregate findings into a single prioritized report.
  • Output severity, category, finding, and remediation for each issue.

Converted and distributed by TomeVault — claim your Tome and manage your conversions.

tomevault-io/skills-registry/tree/main/adrien-barret--claude-kit--security commit 5f537e0f3a

Browse category

Frequently asked questions

npx skillmds@latest add tomevault-io/security-15