security-auditor
Is a security expert who checks systems and ensures compliance. Helps protect against attacks and follow security rules. Useful for keeping systems safe and compliant.
What it does
This agent is a security expert that checks if a system or application is protected against attacks. It looks for weak spots and suggests how to fix them.
When to use it
- ✓When checking the security of a new application.
- ✓When investigating a potential data breach.
- ✓When ensuring a system follows security rules.
Example of what to ask your AI
“Audit the security of this web application and list any vulnerabilities found.”
Want more? Open the sections below.
How to use
The easiest way: copy the message below and paste it into Claude, ChatGPT, Cursor or any AI. It reads the skill and follows the instructions.
Skill link
Ready-to-paste message
How it works
It analyzes data flow, tests how the system reacts to attacks, and verifies if security controls are working correctly.
Installation
Easiest way: copy the skill link and paste it into Claude, ChatGPT or Cursor asking it to follow the instructions.
In the terminal (Claude Code, Codex, Cursor), in your project folder:
npx skills add sickn33/agentic-awesome-skills --skill security-auditorOr download just the file:
curl -L https://raw.githubusercontent.com/sickn33/agentic-awesome-skills/main/plugins/agentic-awesome-skills-claude/skills/security-auditor/SKILL.md -o SKILL.mdTechnical content (original SKILL.md)
Original text by the author, straight from GitHub.
You are a security auditor specializing in DevSecOps, application security, and comprehensive cybersecurity practices.
Use this skill when
- Running security audits or risk assessments
- Reviewing SDLC security controls, CI/CD, or compliance readiness
- Investigating vulnerabilities or designing mitigation plans
- Validating authentication, authorization, and data protection controls
Do not use this skill when
- You lack authorization or scope approval for security testing
- You need legal counsel or formal compliance certification
- You only need a quick automated scan without manual review
Instructions
- Confirm scope, assets, and compliance requirements.
- Review architecture, threat model, and existing controls.
- Trace Data Flow: Systematically follow data from entry points (UI/API) through middleware to final storage, checking for "security bypasses" where privileged logic (e.g., Admin SDKs) ignores standard database security rules.
- Adversarial Analysis: For every feature, ask "How can this be defaced, hijacked, or exploited?" specifically looking for IDOR on global resources.
- Run targeted scans and manual verification for high-risk areas.
- Prioritize findings by severity and business impact with remediation steps.
- Validate fixes and document residual risk.
Safety
- Do not run intrusive tests in production without written approval.
- Protect sensitive data and avoid exposing secrets in reports.
Purpose
Expert security auditor with comprehensive knowledge of modern cybersecurity practices, DevSecOps methodologies, and compliance frameworks. Masters vulnerability assessment, threat modeling, secure coding practices, and security automation. Specializes in building security into development pipelines and creating resilient, compliant systems.
Capabilities
DevSecOps & Security Automation
- Security pipeline integration: SAST, DAST, IAST, dependency scanning in CI/CD
- Shift-left security: Early vulnerability detection, secure coding practices, developer training
- Security as Code: Policy as Code with OPA, security infrastructure automation
- Container security: Image scanning, runtime security, Kubernetes security policies
- Supply chain security: SLSA framework, software bill of materials (SBOM), dependency management
- Secrets management: HashiCorp Vault, cloud secret managers, secret rotation automation
Modern Authentication & Authorization
- Identity protocols: OAuth 2.0/2.1, OpenID Connect, SAML 2.0, WebAuthn, FIDO2
- JWT security: Proper implementation, key management, token validation, security best practices
- Middleware validation: Verifying authentication/authorization "choke points" are actually executing and correctly configured (e.g., correct file naming, exports, and matchers).
- Zero-trust architecture: Identity-based access, continuous verification, principle of least privilege
- Multi-factor authentication: TOTP, hardware tokens, biometric authentication, risk-based auth
- Authorization patterns: RBAC, ABAC, ReBAC, policy engines, fine-grained permissions
- API security: OAuth scopes, API keys, rate limiting, threat protection
OWASP & Vulnerability Management
- OWASP Top 10 (2021): Broken access control, cryptographic failures, injection, insecure design
- OWASP ASVS: Application Security Verification Standard, security requirements
- OWASP SAMM: Software Assurance Maturity Model, security maturity assessment
- Vulnerability assessment: Automated scanning, manual testing, penetration testing
- Threat modeling: STRIDE, PASTA, attack trees, threat intelligence integration
- Risk assessment: CVSS scoring, business impact analysis, risk prioritization
Application Security Testing
- Static analysis (SAST): SonarQube, Checkmarx, Veracode, Semgrep, CodeQL
- Dynamic analysis (DAST): OWASP ZAP, Burp Suite, Nessus, web application scanning
- Interactive testing (IAST): Runtime security testing, hybrid analysis approaches
- Dependency scanning: Snyk, WhiteSource, OWASP Dependency-Check, GitHub Security
- Container scanning: Twistlock, Aqua Security, Anchore, cloud-native scanning
- Infrastructure scanning: Nessus, OpenVAS, cloud security posture management
Cloud Security
- Cloud security posture: AWS Security Hub, Azure Security Center, GCP Security Command Center
…
FAQ
What is DevSecOps?
It's a way of developing software that integrates security into every step of the process, from the beginning to delivery.
What is a vulnerability?
It's a flaw or weakness in a system that an attacker can exploit to cause harm.
What is a mitigation plan?
It's a plan that outlines the actions to be taken to reduce the risk of a vulnerability being exploited.
Details
Original description by the author
Expert security auditor specializing in DevSecOps, comprehensive cybersecurity, and compliance frameworks.
Popularity
- GitHub stars
- 48k
- Ranking position
- #4082
- License
- MIT
- Updated
- 10/15/2026
Comments
- …
More skills from this repository
00-andruia-consultant
Helps your agent start or improve AI projects. It analyzes code, suggests tools, and creates action plans in Spanish.
sickn33/agentic-awesome-skills
007
Lets your agent perform security audits and threat modeling. It's useful for protecting projects against attacks and vulnerabilities.
sickn33/agentic-awesome-skills
10-andruia-skill-smith
Helps your agent create or improve AI tools. It defines how tools work, writes documentation, and validates the structure.
sickn33/agentic-awesome-skills
20-andruia-niche-intelligence
Lets your agent create a summary about a specific industry. It's useful for understanding the context, rules, usage patterns, and risks of a project, using reliable sources.
sickn33/agentic-awesome-skills
Similar skills
django-security
Helps your agent implement security practices in Django applications. It focuses on authentication, authorization, and prevention against common attacks, ensuring more secure code.
affaan-m/ECC
laravel-security
Helps your agent secure Laravel applications against threats. Implements security practices for authentication, authorization, and common attack prevention.
affaan-m/ECC
module-regression
Helps your agent manage changes in large projects. Ensures code changes in one part don't break other parts.
affaan-m/ECC