ai-ml-attacks
This skill should be used when the user asks about "AI security", "ML pipeline attacks", "prompt injection", "model…
@allsmogInstall SkillSecurity
Skill
/start-audit
Guided first-run security audit: doctor, scope, threats, scan, verify, report.
Claude Code
$ npx -y skills add allsmog/vuln-scout --skill start-audit --agent claude-code
Codex
$ npx skills add allsmog/vuln-scout --skill start-audit -a codex -y
Cursor
$ npx skills add allsmog/vuln-scout --skill start-audit -a cursor -y
Gemini CLI
$ npx skills add allsmog/vuln-scout --skill start-audit -a gemini-cli -y
GitHub Copilot
$ npx skills add allsmog/vuln-scout --skill start-audit -a github-copilot -y
OpenCode
$ npx skills add allsmog/vuln-scout --skill start-audit -a opencode -y
Windsurf
$ npx skills add allsmog/vuln-scout --skill start-audit -a windsurf -y
SKILL.md
start-audit.SKILL.mdname: start-audit
description: Guided first-run security audit: doctor, scope, threats, scan, verify, report.
Start Audit
Use this task skill when the user asks to start a security audit, audit this repo, perform a security review of a codebase, or review this codebase for vulnerabilities.
Workflow
1. Run `python3 vuln-scout/scripts/doctor.py --strict` or ask the user to address missing quick-profile dependencies. 2. Trigger `session-init` and `large-codebase-check` hooks when the target is a repo or monorepo. 3. Run `/vuln-scout:scope` to establish boundaries and write `.claude/audit-plan.md`. 4. Call `app-mapper`, then `/vuln-scout:threats`, then `threat-modeler`. 5. Run `/vuln-scout:scan --profile quick` first; use `deep` only when optional analyzers are installed or requested. 6. Call `code-reviewer` on prioritized findings. 7. Run `/vuln-scout:verify` per finding that needs confirmation. 8. Finish with `/vuln-scout:report --format bundle --output evidence-bundle`.
Produces
- `.claude/audit-plan.md`
- `.claude/review-ledger.json`
- `.claude/findings.json`
- `report.html`
- `evidence-bundle/`
When NOT To Trigger
Do not trigger for knowledge-only questions about STRIDE, OWASP, dangerous functions, framework patterns, compliance mapping, exploit techniques, or vulnerability classes. Let those knowledge skills answer directly unless the user asks to audit a target.
Read more
name: start-audit description: Guided first-run security audit: doctor, scope, threats, scan, verify, report.
Start Audit
Use this task skill when the user asks to start a security audit, audit this repo, perform a security review of a codebase, or review this codebase for vulnerabilities.
Workflow
1. Run `python3 vuln-scout/scripts/doctor.py --strict` or ask the user to address missing quick-profile dependencies. 2. Trigger `session-init` and `large-codebase-check` hooks when the target is a repo or monorepo. 3. Run `/vuln-scout:scope` to establish boundaries and write `.claude/audit-plan.md`. 4. Call `app-mapper`, then `/vuln-scout:threats`, then `threat-modeler`. 5. Run `/vuln-scout:scan --profile quick` first; use `deep` only when optional analyzers are installed or requested. 6. Call `code-reviewer` on prioritized findings. 7. Run `/vuln-scout:verify` per finding that needs confirmation. 8. Finish with `/vuln-scout:report --format bundle --output evidence-bundle`.
Produces
- `.claude/audit-plan.md`
- `.claude/review-ledger.json`
- `.claude/findings.json`
- `report.html`
- `evidence-bundle/`
When NOT To Trigger
Do not trigger for knowledge-only questions about STRIDE, OWASP, dangerous functions, framework patterns, compliance mapping, exploit techniques, or vulnerability classes. Let those knowledge skills answer directly unless the user asks to audit a target.
Ships withvuln-scout
AI-powered whitebox penetration testing plugin for Claude Code. 9 languages, 22 skills, 7 autonomous agents. STRIDE threat modeling, OWASP 2025 coverage, polyglot monorepo support.
2535 skills9 agents
Stars on GitHub
Momentum
- stars in total
- 25
Other skills on vuln-scout.
@allsmogInstall Skillbusiness-logic
This skill should be used when the user asks about "business logic", "workflow vulnerability", "trust boundary", "state machine",…
@allsmogInstall Skillcache-poisoning
This skill should be used when the user asks about "cache poisoning", "web cache deception", "CDN cache", "proxy cache", "nginx…
@allsmogInstall Skillcloud-native
This skill should be used when the user asks about "cloud security", "AWS security", "GCP security", "Azure security",…
@allsmogInstall Skillcompliance-mapping
This skill should be used when the user asks about "compliance mapping", "PCI-DSS", "HIPAA", "SOC 2", "NIST CSF", "regulatory…
@allsmogInstall Skillcpg-analysis
This skill should be used when the user asks about "Code Property Graph", "CPG analysis", "Joern queries", "CPGQL", "data flow…
@allsmogInstall SkillMore skills from other plugins.
api-security
Use for authorized security assessment of REST, GraphQL, WebSocket, or SOAP APIs, including discovery, authentication,…
@zhaoxuya520Install Skillabusing-dpapi-for-cred…
Extract and decrypt Windows DPAPI-protected secrets (Credential Manager, browser logins/cookies, Wi-Fi credentials, KeePass keys)…
@mukul975Install Skillclean-user-facing-text
Clean and finalize authorized natural-language text intended for readers by auditing suspicious invisible Unicode and rewriting…
@guillaumemeyerInstall Skill
Questions about start-audit.
- Which coding agents can use start-audit?
- start-audit installs in Claude Code, Codex, Cursor, Gemini CLI, GitHub Copilot, OpenCode and Windsurf with the skills CLI, using each agent's flag shown on this page. Flowy's auto-invocation, which fires a skill when your prompt matches, runs in Claude Code only.