security

name	security
description	Guidance on security analysis, compliance auditing, and vulnerability assessment techniques relevant to legal and regulatory compliance tasks

Security Skill

This skill provides guidance on security analysis, compliance auditing, and vulnerability assessment techniques relevant to legal and regulatory compliance tasks.

Available Sub-skills

Security Auditing

Comprehensive security analysis including credential detection, OWASP vulnerability patterns, dependency scanning, and threat modeling. Useful for:

• Auditing system configurations for compliance
• Identifying security misconfigurations
• Detecting exposed credentials and secrets
• Assessing security controls

Access Control Review

Techniques for analyzing and evaluating access control mechanisms. Useful for:

• Reviewing permission structures
• Assessing role-based access control (RBAC)
• Identifying access control gaps
• Verifying least privilege principles

Vulnerability Detection

Methods for identifying and assessing security vulnerabilities. Useful for:

• Finding common security weaknesses
• Assessing system vulnerabilities
• Evaluating security posture
• Prioritizing remediation efforts

Quick Start

1. Identify the security aspect you need to assess (configuration, access control, vulnerabilities)
2. Refer to the appropriate sub-skill for detailed techniques
3. Use the provided frameworks and checklists
4. Document findings with severity levels and remediation recommendations

Common Use Cases

• HIPAA Compliance: Use security-auditing for configuration review
• Data Protection: Use access-control-review for permission verification
• System Hardening: Use vulnerability-detection for gap analysis