Agent skill
security-audit
Security auditing and vulnerability assessment specialist. Use when conducting security reviews, analyzing code for vulnerabilities, performing OWASP assessments, or creating security audit reports.
Install this agent skill to your Project
npx add-skill https://github.com/89jobrien/steve/tree/main/steve/skills/security-audit
SKILL.md
Security Audit Skill
Comprehensive security auditing covering code review, vulnerability assessment, OWASP Top 10, dependency analysis, and remediation planning.
What This Skill Does
- Conducts security code reviews
- Identifies vulnerabilities (CVSS scoring)
- Performs OWASP Top 10 assessments
- Audits authentication/authorization
- Reviews data protection controls
- Analyzes dependency vulnerabilities
- Creates remediation roadmaps
When to Use
- Security reviews before release
- Compliance audits
- Penetration test preparation
- Incident response analysis
- Dependency vulnerability assessment
Reference Files
references/SECURITY_AUDIT.template.md- Comprehensive security audit report formatreferences/owasp_checklist.md- OWASP Top 10 checklist with CVSS scoring and CWE references
Workflow
- Define scope and methodology
- Perform static/dynamic analysis
- Document findings by severity
- Map to OWASP categories
- Create remediation roadmap
- Verify fixes
Output Format
Security findings should include:
- Severity (Critical/High/Medium/Low)
- CVSS score and vector
- CWE classification
- Proof of concept
- Remediation steps
Recommended Agent Skills
Expand your agent's capabilities with these related and highly-rated skills.
89jobrien/steve
python-scripting
Python scripting with uv and PEP 723 inline dependencies. Use when creating standalone Python scripts with automatic dependency management.
89jobrien/steve
example-skill
This skill should be used when demonstrating skill structure and format. Provides example patterns for creating new skills.
89jobrien/steve
tool-presets
Standardized tool set definitions for Claude Code agents ensuring consistent tool access across similar agent types
89jobrien/steve
file-organizer
Intelligently organizes your files and folders across your computer by understanding context, finding duplicates, suggesting better structures, and automating cleanup tasks. Reduces cognitive load and keeps your digital workspace tidy without manual effort.
89jobrien/steve
brainstorming
You MUST use this before any creative work - creating features, building components, adding functionality, or modifying behavior. Explores user intent, requirements and design before implementation.
89jobrien/steve
database-optimization
SQL query optimization and database performance specialist. Use when optimizing slow queries, fixing N+1 problems, designing indexes, implementing caching, or improving database performance. Works with PostgreSQL, MySQL, and other databases.
Didn't find tool you were looking for?