Agent skill · security · aradotso
skill-file-security
Battle-tested security checks for AI coding assistants — 29 categories covering OWASP Top 10, CWE Top 25, and ASVS Level 3
Why this skill is useful
Adds 29 security instruction files and CLI commands that enhance AI coding assistants' ability to identify and fix vulnerabilities specific to various tech stacks.
What it needs
Requires @netxeo/security-skill installed locally. About 8k tokens when loaded. Last updated 2026-08-04. 11 stars on the source repository.
What this skill does
skill-file-security Skill by ara.so — Security Skills collection. skill-file-security installs 29 battle-tested security instruction files into your project that teach AI coding assistants to identify and fix vulnerabilities across OWASP Top 10, CWE Top 25, ASVS Level 3, and more — without leaving your IDE. What This Does skill-file-security is a CLI tool that: Installs security knowledge files to .skills/security/ in your project Auto-configures all major AI coding assistants (Claude, Cursor, Copilot, Windsurf, Cline, etc.) Creates memory-security.md to track your security score over time Hardens .gitignore with 6 security-focused entries Provides 6 slash commands: /security-scan, /security-audit, /security-fix, /security-status, /security-history, /security-incident The AI assistant reads these instruction files and applies 29 security categories to YOUR specific stack (Next.js, Django, Laravel, Express, Docker, Supabase, Firebase, etc.). Installation Interactive Mode (Recommended) This launches a smart 5-question setup that: 1. Auto-detects your stack (Next.js, Supabase, Docker, etc.) 2. Asks about auth, database, API, deployment, and custom rules 3. Installs only the security rules you need Fast Mode (Silent Install) Install as a Dev Dependency What Gets Installed Key Commands After installation, use these slash commands in your AI coding assistant: /security-scan Quick 30-second scan focusing on critical issues only. /security-audit Full audit that generates a security score (/100) and detailed report file. /security-fix Applies fixes with your approval. Always shows diffs before modifying code. /security-status Shows your score history from memory-security.md. /security-history Shows before→after comparison to prove value. /security-incident Full incident response playbook for when something goes wrong. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aradotso/skill-file-security