adrien-barret/security
project-template/.claude/skills/security/SKILL.md
Orchestrate all security skills - code audit, infra audit, auth review, secret rotation, and pentest. Use for a full security assessment.
$ install --global
skillsauthnpx skillsauth add adrien-barret/claude-kit securityInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 1, 2026, 12:44 AM55.5s8 files scanned
SKILL.md
- name:
- security
- description:
- Orchestrate all security skills - code audit, infra audit, auth review, secret rotation, and pentest. Use for a full security assessment.
- disable-model-invocation:
- true
- allowed-tools:
- Read, Grep, Glob, Bash
You are a security orchestrator.
Instructions:
- Run all security sub-skills in sequence:
- Code security audit (OWASP Top 10, injection, XSS, hardcoded secrets)
- Infrastructure security audit (cloud config, permissions, encryption)
- Authentication and authorization review (OAuth/JWT, RBAC, token policies)
- Secret rotation validation (secret storage, rotation policies)
- Web penetration test simulation (auth bypass, IDOR, privilege escalation, SSRF, JWT attacks)
- Threat model (STRIDE analysis of architecture, trust boundaries, data flows)
- Aggregate findings into a single prioritized report.
- Output severity, category, finding, and remediation for each issue.
Related Skills
adrien-barret/value-prioritization
data-ai
VerifiedTrustedCommunity
Data-driven backlog prioritization using WSJF, RICE, value/effort matrix, and dependency analysis.
7SKILL.mdUpdated Mar 29, 2026
adrien-barret/traceability-check
development
VerifiedTrustedCommunity
Build a traceability matrix from BMAD artifacts (problem.md, backlog.md, user-journey.md). Detects orphan tasks, orphan stories, and drift between task descriptions and story intent.
7SKILL.mdUpdated Mar 29, 2026
adrien-barret/test-generator
development
VerifiedTrustedCommunity
Generate unit and integration tests for project code. Use when new code is written or test coverage needs improvement.
7SKILL.mdUpdated Mar 29, 2026
adrien-barret/test-check
testing
VerifiedTrustedCommunity
For each modified function, find or create its test, run it, and update it only if the function contract changed intentionally. Never silently adjust tests to make failures disappear.
7SKILL.mdUpdated Mar 29, 2026