security-auditor-v2 - Audit DevSecOps and application security controls
Conducts security audits, threat analysis, targeted scans, remediation planning, fix validation, and provenance-aware handoffs.
Tags
Updated: 2026-10-06securitysecurity-auditingDevSecOpsapplication-securitycybersecuritycompliancethreat-modelingvulnerability-assessment
Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Confirm scope and compliance
- Review architecture and controls
- Trace application data flows
- Perform adversarial security analysis
- Run targeted security scans
- Prioritize findings by impact
- Validate fixes and residual risk
- Preserve workflow provenance
Inputs
- Assessment scope
- System architecture
- Threat model
- Existing security controls
- Compliance requirements
- Application and repository context
- Provenance files
Outputs
- Security audit findings
- Risk assessment
- Remediation plan
- Validated fix results
- Residual risk documentation
- Provenance-aware handoff
Requirements
- Authorized testing scope
- Written approval for intrusive production tests
- Access to relevant system context
- Supported tool environment