Security Auditor
DROOdotFOO/agent-skillsGeneral-purpose application security auditing across Python, TypeScript, Go, and Rust. TRIGGER when: user asks for a security audit, vulnerability assessment, threat modeling, code security review, OWASP analysis, variant analysis, or asks about injection, XSS, SSRF, path traversal, deserialization, or crypto misuse in application code. DO NOT TRIGGER when: working with .sol files, smart contracts, or Solidity audits (use solidity-auditor); when reviewing code for general quality without security focus (use code-review); when auditing dependencies only (use dependency-auditor).
At a glance
This skill is for Legal and helps you audit application security, identify vulnerabilities in code, and perform threat modeling.
/plugin marketplace add DROOdotFOO/agent-skills
/plugin install security-auditor
Setup, runtime and requirements describe DROOdotFOO/agent-skills, the repo this skill ships in.
securityvulnerabilitypythontypescriptgorust
Also in DROOdotFOO/agent-skills
View the repoDevil's advocate code review with three adversarial personas that challenge assumptions and find hidden issues. TRIGGER when: user asks for...
Multi-agent system design with orchestration patterns, tool schemas, and guardrails. TRIGGER when: user asks to design an agent system, choo...
Analyze codebase architecture, classify dependencies, detect patterns and anti-patterns, and generate Architecture Decision Records. TRIGGER...
Check and run autonomous experiments. Query experiment status, view results dashboards, and execute iterations. TRIGGER when: user asks abou...
Blockscout MCP tool reference for on-chain data queries. Covers all 16 tools: address info, transactions, token transfers, NFTs, contract AB...
Detect project stack and generate CI/CD pipeline configuration for GitHub Actions or GitLab CI. TRIGGER when: user asks to set up CI/CD, cre...
Build apps with the Claude API or Anthropic SDK. TRIGGER when: code imports `anthropic`/`@anthropic-ai/sdk`/`claude_agent_sdk`, or user asks...
Auto-generate onboarding documentation from codebase analysis, tailored to the reader's experience level. TRIGGER when: user asks to onboard...
Structured code review with blast radius analysis, security scanning, quality scoring, and a 30+ item checklist. TRIGGER when: user asks to...
CoinGecko and GeckoTerminal API reference for crypto market data, token prices, DEX pools, and on-chain analytics. TRIGGER when: user asks a...
Schema analysis, ERD generation, index optimization, and migration safety. TRIGGER when: user asks about database schema design, normalizati...
Multi-language dependency vulnerability scanning and license compliance auditing. TRIGGER when: user asks to audit dependencies, check for v...
Other Legal skills
Applies Anthropic's official brand colors and typography to any sort of artifact that may benefit from having Anthropic's look-and-feel. Use...
Review the changes since a fixed point (commit, branch, tag, or merge-base) along two axes — Standards (does the code follow this repo's doc...
Meeting notes page — title bar with attendees, agenda checklist, decisions block, action items table with owners + dates, and a "next meetin...
An editorial-style poster — newsprint paper, dateline, oversized serif headline with a struck-through word and italic accent, a 2-column bod...
A standalone pricing page — header, plan tiers, feature comparison table, and an FAQ. Use when the brief asks for "pricing", "plans", "subsc...
Apple Human Interface Guidelines as 14 agent skills covering platforms, foundations, components, patterns, inputs, and technologies for iOS,...