Skills security

📦

security

Name: security
Author: ByronWilliamsCPA

Content revision r1 Safe ⚙️ External commands

Validate Project Security

Security reviews can miss secrets, weak configuration, and dependency risk. This skill guides Claude, Codex, and Claude Code through structured checks and remediation planning.

Supports: Claude Codex Code(CC)

🥉 78 Bronze

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "security" from https://skillstore.io/skills/byronwilliamscpa-security.md and its manifest at https://skillstore.io/api/skills/byronwilliamscpa-security/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/byronwilliamscpa-security.md Signed manifest GET /api/skills/byronwilliamscpa-security/manifest Signed lockfile GET /api/skills/byronwilliamscpa-security/lockfile

Test it

Using "security". Review my repository before a release.

Expected outcome:

The review should cover secret scanning, dependency vulnerabilities, signing configuration, and unresolved security advisories.

Using "security". Help me understand scanner results.

Expected outcome:

Group findings by severity and affected component.
Identify likely false positives for manual review.
Prioritize fixes that reduce release risk.

Using "security". Check whether my project covers OWASP risks.

Expected outcome:

The assessment should compare project controls against injection, authentication, access control, XSS, and insecure configuration concerns.

Security Audit

Safe

v8 • 7/6/2026 Open versioned report

The only static finding is a Markdown bash code block listing hardcoded security commands. I found no executable code, prompt injection, credential exfiltration, or malicious intent in SKILL.md.

Files scanned

Lines analyzed

Review items

False positives ignored

Risk Factors

⚙️ External commands (1)

SKILL.md:27-46

No confirmed security findings were detected by the latest completed static and semantic audit. This does not prove the skill has no side effects.

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/byronwilliamscpa-security/audits/8?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/byronwilliamscpa-security/security.svg)](https://skillstore.io/skills/byronwilliamscpa-security?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/byronwilliamscpa-security?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/byronwilliamscpa-security/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/byronwilliamscpa-security.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

ByronWilliamsCPA. (2026). security security audit report (audit version 8) [Author version unspecified]. Skillstore. https://skillstore.io/skills/byronwilliamscpa-security/audits/8

BibTeX citation

@techreport{byronwilliamscpa-byronwilliamscpa-security-2026,
  author = {ByronWilliamsCPA},
  title = {security security audit report (audit version 8)},
  institution = {Skillstore},
  year = {2026},
  number = {8},
  url = {https://skillstore.io/skills/byronwilliamscpa-security/audits/8},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "security security audit report (audit version 8)"
version: "unspecified"
type: report
authors:
  - name: "ByronWilliamsCPA"
date-released: "2026-07-06"
url: "https://skillstore.io/skills/byronwilliamscpa-security/audits/8"
identifiers:
  - type: other
    value: "skillstore:byronwilliamscpa-security:audit:8"
    description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: High

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Pre-Commit Security Check

Review secrets, dependency risk, and common vulnerabilities before code is committed.

Release Readiness Review

Check vulnerabilities, signing configuration, and security advisory needs before release.

Secret Handling Review

Evaluate key validation, encryption practices, and sensitive data handling.

Try These Prompts

Run a Basic Security Checklist

Use the security skill to review my project for secrets, dependency risk, and obvious OWASP issues. Ask before running any command.

Plan Scanner Coverage

Use the security skill to plan Bandit, pip-audit, Safety, and Semgrep checks for this repository. Summarize findings and next actions.

Prepare Release Security Signoff

Use the security skill to perform a pre-release security review. Check signing configuration, dependencies, secrets, and open vulnerabilities.

Build a Remediation Plan

Use the security skill to triage scan results, map each issue to OWASP categories, and propose prioritized remediation steps.

Best Practices

Review every command before execution, especially in unfamiliar repositories.
Run security scans in a clean branch with current dependencies.
Pair automated scanner results with manual OWASP review.

Avoid

Treating scanner output as complete proof of security.
Running commands against untrusted repositories without reviewing configuration first.
Publishing releases with unresolved high-severity findings.

Frequently Asked Questions

Does this skill run commands automatically?

No. It documents security commands and workflows. The assistant should request confirmation before executing local commands.

Which tools does it reference?

It references GPG, SSH, git signing configuration, Bandit, pip-audit, Safety, and Semgrep.

Can it find every vulnerability?

No. It supports structured review, but complete assurance requires testing, code review, and threat modeling.

Is it suitable for release checks?

Yes. It includes pre-release checklist items for vulnerabilities, dependency updates, and security advisories.

Does it include scanner configuration files?

No. It references common scanner commands, but this package only contains the main skill instructions.

Can Claude, Codex, and Claude Code use it?

Yes. The report marks the skill as compatible with Claude, Codex, and Claude Code.

Developer Details

Author

ByronWilliamsCPA

License

MIT

Skillstore revision

Version notice

The author did not declare a version.

Repository

https://github.com/ByronWilliamsCPA/fragrance-rater/tree/main/.claude/skills/security

Ref

dd4a3ef9f20ddf38830950b4bb713df96b431fd6

Maintenance freshness

7/18/2026

Usage

6 downloads · 203 views

File structure

📄 SKILL.md