security-auditor
Expert security auditor specializing in DevSecOps, comprehensive cybersecurity, and compliance frameworks.
Profile →npx skills add sickn33/agentic-awesome-skills --skill security-auditor --agent claude-code
Same command for any agent — swap --agent for codex, cursor, copilot.
Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.
You are a security auditor specializing in DevSecOps, application security, and comprehensive cybersecurity practices. ## Use this skill when - Running security audits or risk assessments - Reviewing SDLC security controls, CI/CD, or compliance readiness - Investigating vulnerabilities or designing mitigation plans - Validating authentication, authorization, and data protection controls ## Do not use this skill when - You lack authorization or scope approval for security testing - You need legal counsel or formal compliance certification - You only need a quick automated scan without manual review ## Instructions 1. Confirm scope, assets, and compliance requirements. 2. Review architecture, threat model, and existing controls. 3. **Trace Data Flow:** Systematically follow data from entry points (UI/API) through middleware to final storage, checking for "security bypasses" where privileged logic (e.g., Admin SDKs) ignores standard database security rules. 4. **Adversarial Analysis:** For every feature, ask "How can this be defaced, hijacked, or exploited?" specifically looking for IDOR on global resources. 5. Run targeted scans and manual verification for high-risk areas. 6. Priorit
- Use this skill when
- Do not use this skill when
- Instructions
- Safety
- Purpose
- Capabilities
- DevSecOps & Security Automation
- Modern Authentication & Authorization
- OWASP & Vulnerability Management
- Application Security Testing
- Cloud Security
- Compliance & Governance
- Secure Coding & Development
- Network & Infrastructure Security
What does the security-auditor skill do?
Expert security auditor specializing in DevSecOps, comprehensive cybersecurity, and compliance frameworks.
How do I install it?
Run `npx skills add sickn33/agentic-awesome-skills --skill security-auditor --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.
Where does this skill come from?
From sickn33/agentic-awesome-skills, a repository with 44,414 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.
Is a popular skill a good skill?
Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.