security-audit

Name: security-audit
Author: zkupu

Apply the @kali skill. Perform a security assessment of the specified code or the current project.

by zkupu(0) 0 installs

Free

Free account. Installing gives you the manifest plus copy-paste snippets.

See reviews

About

Prompt file imported from zkupu/pantheon-py (.cursor/commands/security-audit.md). Copyright stays with the author.

Apply the @kali skill. Perform a security assessment of the specified code or the current project.

Map the attack surface — entry points, trust boundaries, data flows
Apply STRIDE to each component
Scan for: hardcoded secrets, injection vectors, missing auth, unsafe deserialization
Search for patterns: password, secret, key, token, exec, eval, unsafe
Check dependencies for known vulnerabilities
Classify findings by severity (Critical/High/Medium/Low/Info)
Provide a concrete remediation for every finding

Use it

Copy one of these into your project. Installing also returns the manifest and these snippets.

Apply the @kali skill. Perform a security assessment of the specified code or the current project.

1. Map the attack surface — entry points, trust boundaries, data flows
2. Apply STRIDE to each component
3. Scan for: hardcoded secrets, injection vectors, missing auth, unsafe deserialization
4. Search for patterns: `password`, `secret`, `key`, `token`, `exec`, `eval`, `unsafe`
5. Check dependencies for known vulnerabilities
6. Classify findings by severity (Critical/High/Medium/Low/Info)
7. Provide a concrete remediation for every finding

Output each finding as: Title | Severity | Location | Description | Remediation | Cost of deferral

Installed into a catalogue, chosen by a router

Install security-audit and it becomes one more candidate the router can pick - when it fits.

A listing is a routing target with a manifest: what it does, which domains it covers, what it costs and who publishes it. Once installed it sits beside your own models and tools, is scored like any other candidate for each request, and shows up in the trace when it wins. Ratings come from workspaces that installed it, one per account.

Photo: RDNE Stock project

Manifest

The prompt text and its fill-in variables. Copy it or fetch it by URL from your own code.

zkupu-pantheon-py-security-audit-cursor-command.prompt.jsonjson

{
  "prompt": "Apply the @kali skill. Perform a security assessment of the specified code or the current project.\n\n1. Map the attack surface — entry points, trust boundaries, data flows\n2. Apply STRIDE to each component\n3. Scan for: hardcoded secrets, injection vectors, missing auth, unsafe deserialization\n4. Search for patterns: `password`, `secret`, `key`, `token`, `exec`, `eval`, `unsafe`\n5. Check dependencies for known vulnerabilities\n6. Classify findings by severity (Critical/High/Medium/Low/Info)\n7. Provide a concrete remediation for every finding\n\nOutput each finding as: Title | Severity | Location | Description | Remediation | Cost of deferral",
  "variables": [],
  "notes": "Apply the @kali skill. Perform a security assessment of the specified code or the current project.",
  "metadata": {
    "source": {
      "provider": "github-cursor-commands",
      "repository": "https://github.com/zkupu/pantheon-py",
      "path": ".cursor/commands/security-audit.md",
      "ref": "75a4a807c43ec4608074de9cf59bcdb00efc5d8b",
      "url": "https://github.com/zkupu/pantheon-py/blob/75a4a807c43ec4608074de9cf59bcdb00efc5d8b/.cursor/commands/security-audit.md",
      "key": "zkupu/pantheon-py/.cursor/commands/security-audit.md"
    }
  }
}

Fetch it by URL: GET /api/v1/registry/zkupu-pantheon-py-security-audit-cursor-command/manifest?version=1.0.0

About

Use it

Install security-audit and it becomes one more candidate the router can pick - when it fits.

Manifest

Reviews