The Comprehensive Security Audit skill provides a structured 7-phase workflow for identifying and mitigating security risks within your codebase. By guiding developers through professional threat modeling, automated attack surface mapping, and deep vulnerability analysis powered by Gemini, it moves beyond basic automated scanning to offer contextual insights into authentication, authorization, and business logic flaws. It is an essential tool for teams preparing for production releases, conducting post-incident reviews, or ensuring compliance with major standards like OWASP Top 10, GDPR, and PCI-DSS.
주요 기능
01Human-in-the-loop checkpoints for nuanced security context gathering
02Context-aware threat modeling and application profiling
03Detailed remediation reports with exploit scenarios and fix examples
04Automated attack surface discovery and sensitive data flow mapping
05Deep vulnerability analysis covering OWASP Top 10 and logic flaws
060 GitHub stars
