security-auditor
Expert security auditor specializing in DevSecOps, comprehensive cybersecurity
by sickn33Free
Description
security-auditor is an agent skill for running security audits and risk assessments with a DevSecOps and application-security focus. It reviews the controls across the software development lifecycle, including CI and CD pipelines and readiness for compliance, investigates vulnerabilities and designs mitigation plans, and validates authentication, authorisation and data-protection controls. The skill is clear about its scope. It should not be used without authorisation or an approved scope for security testing, it is not a substitute for legal counsel or formal compliance certification, and it is not a quick automated scan without manual review. Use it when you need a considered audit of a system's security posture, a risk assessment, or a review of how security is built into the delivery pipeline. It is part of the sickn33/agentic-awesome-skills repository on GitHub, which has about 47,600 stars. The listing shows it as free, and it has about 1,400 installs. Its security audits show passes from Gen Agent Trust Hub, Socket and Snyk. Install it with npx skills add https://github.com/sickn33/agentic-awesome-skills --skill security-auditor.…
Highlights
- DevSecOps and application security review
- SDLC and CI/CD controls
- Authentication and authorisation validation
- Vulnerability investigation and mitigation plans
- Requires authorised scope
Ratings & Reviews
No ratings yet
Be the first to rate security-auditor.
People also visit
security-auditor FAQ
What does it audit?
Security controls across the development lifecycle, CI and CD pipelines, authentication, authorisation and data protection.
When should it not be used?
Without authorisation or an approved scope, for formal certification or legal advice, or as a quick scan without manual review.
What does it produce?
Audit and risk findings with mitigation plans for vulnerabilities it investigates.
How do I install it?
Run npx skills add https://github.com/sickn33/agentic-awesome-skills --skill security-auditor.
Is it checked for security?
Its security audits show passes from Gen Agent Trust Hub, Socket and Snyk.
What are the best security-auditor alternatives?
Popular alternatives to security-auditor include security-audit, cc-skill-security-review and security-review. See all security-auditor alternatives