Imported from Simulasi-Ekonomi/FauzanEngine2- (skills/security-audit-bits/SKILL.md). Install upstream with npx skills add Simulasi-Ekonomi/FauzanEngine2- --skill security-audit-bits. Copyright stays with the author.

Security Testing and Analysis

Name: security-audit-bits
Author: Simulasi-Ekonomi

This skill provides a suite of capabilities for auditing codebases, identifying security vulnerabilities, and verifying fixes.

Core Capabilities

1. Static Analysis Integration

CodeQL & Semgrep: Perform deep semantic analysis to find complex logic flaws.
Vulnerability Pattern Matching: Detect common C++ pitfalls like buffer overflows, use-after-free, and integer overflows.

2. Code Auditing Workflow

Security Review: Analyze new pull requests for FauzanEngine to ensure no security regressions.
Variant Analysis: Once a bug is found, automatically scan the entire engine for similar patterns.

3. Verification & Fixes

Remediation Advice: Provide specific C++ code fixes that follow secure coding standards.
Fix Verification: Run regression tests to ensure the patch doesn't break other parts of the engine.

Usage for FauzanEngine

Aries must invoke this skill before any major git commit or make command to ensure the integrity of the sovereign core.

{ "ocm": "1", "id": "simulasi-ekonomi-fauzanengine2-security-audit-bits", "kind": "skill", "name": "security-audit-bits", "description": "Security auditing and testing skills for code auditing, variant analysis, and fix verification using industry-standard tools.", "publisher": "Simulasi-Ekonomi", "version": "1.0.0", "capabilities": { "domains": [ "coding" ], "tags": [ "skill-md", "github" ], "languages": [ "en" ] }, "quality_prior": 0.6, "examples": [ "Security auditing and testing skills for code auditing, variant analysis, and fix verification using industry-standard tools." ], "primary": false, "metadata": { "source": { "provider": "github", "repository": "https://github.com/Simulasi-Ekonomi/FauzanEngine2-", "path": "skills/security-audit-bits/SKILL.md", "ref": "b44d3962e72e5b4fe1f391396c29429edb2773eb", "url": "https://github.com/Simulasi-Ekonomi/FauzanEngine2-/blob/b44d3962e72e5b4fe1f391396c29429edb2773eb/skills/security-audit-bits/SKILL.md", "key": "Simulasi-Ekonomi/FauzanEngine2-/skills/security-audit-bits/SKILL.md" } }, "instructions": "# Security Testing and Analysis\n\nThis skill provides a suite of capabilities for auditing codebases, identifying security vulnerabilities, and verifying fixes.\n\n## Core Capabilities\n\n### 1. Static Analysis Integration\n- **CodeQL & Semgrep**: Perform deep semantic analysis to find complex logic flaws.\n- **Vulnerability Pattern Matching**: Detect common C++ pitfalls like buffer overflows, use-after-free, and integer overflows.\n\n### 2. Code Auditing Workflow\n- **Security Review**: Analyze new pull requests for FauzanEngine to ensure no security regressions.\n- **Variant Analysis**: Once a bug is f", "cost": { "context_tokens": 261 } }

security-audit-bits

About

Security Testing and Analysis

Core Capabilities

1. Static Analysis Integration

2. Code Auditing Workflow

3. Verification & Fixes

Usage for FauzanEngine

Use it

Manifest

Reviews