Agent skill · security · aradotso
esaa-security-audit
Execute deterministic, event-sourced security audits using ESAA-Security's LLM-based agent architecture with 95 checks across 16 security domains
Why this skill is useful
Adds 95 executable security checks across 16 domains, providing a comprehensive auditing capability that the AI cannot generate on its own.
What it needs
Requires python installed locally. Requires anthropic, openai account access. About 7k tokens when loaded. Last updated 2026-08-04. 11 stars on the source repository.
What this skill does
ESAA-Security Audit Skill Skill by ara.so — Security Skills collection. Overview ESAA-Security applies the Event Sourcing for Autonomous Agents (ESAA) architecture to automated security auditing. It executes structured security audits across 16 security domains with 95 executable checks, governed by an immutable append-only event log. Every finding, classification, and remediation decision is recorded as a verifiable fact. Key differentiators: Deterministic audits — same repository state produces same findings via event replay Hallucination prevention — schema-validated outputs with evidence requirements Complete audit trail — .roadmap/activity.jsonl records every check execution Governed agents — PARCER contracts enforce decision hygiene and token budgets Verifiable reports — SHA-256 hash verification from events to final output Installation Requirements: Python 3.9+ LLM API access (OpenAI GPT-4, Anthropic Claude, or compatible) Target repository must be readable by the audit agent Repository Structure Core Concepts Event Store (activity.jsonl) Every audit action is an immutable event: Read Model (roadmap.json) Projection of audit progress (derived from events): Running an Audit Phase 1: Reconnaissance Task outputs: SEC-001: Tech stack inventory (languages, frameworks, dependencies) SEC-002: Architecture map (components, trust boundaries) SEC-003: Data flow diagram (inputs, storage, outputs) SEC-004: Attack surface enumeration (endpoints, file uploads, APIs) Phase 2: Domain Audit Execution Example check result: Phase 3: Risk Classification Risk matrix output: Phase 4: Report Generation Event Replay and Verification Security Domain Coverage Critical Domains (8 total) Secrets & Configuration (SC-001 to SC-008): Authentication (AU-001 to AU-008): Password hashing strength MFA enforcement Session token generation Credential transmission (HTTPS) Authorization (AZ-001 to AZ-006): RBAC implementation Privilege escalation checks IDOR vulnerabilities API authorization Input …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aradotso/esaa-security-audit