Security Skill

This skill provides guidance on security analysis, compliance auditing, and vulnerability assessment techniques relevant to legal and regulatory compliance tasks.

Available Sub-skills

Security Auditing

Comprehensive security analysis including credential detection, OWASP vulnerability patterns, dependency scanning, and threat modeling. Useful for:

• Auditing system configurations for compliance
• Identifying security misconfigurations
• Detecting exposed credentials and secrets
• Assessing security controls

Access Control Review

Techniques for analyzing and evaluating access control mechanisms. Useful for:

• Reviewing permission structures
• Assessing role-based access control (RBAC)
• Identifying access control gaps
• Verifying least privilege principles

Vulnerability Detection

Methods for identifying and assessing security vulnerabilities. Useful for:

• Finding common security weaknesses
• Assessing system vulnerabilities
• Evaluating security posture
• Prioritizing remediation efforts

Quick Start

1. Identify the security aspect you need to assess (configuration, access control, vulnerabilities)
2. Refer to the appropriate sub-skill for detailed techniques
3. Use the provided frameworks and checklists
4. Document findings with severity levels and remediation recommendations

Common Use Cases

• HIPAA Compliance: Use security-auditing for configuration review
• Data Protection: Use access-control-review for permission verification
• System Hardening: Use vulnerability-detection for gap analysis