security-audit
Comprehensive security auditing skill leveraging the security-auditor persona. Use for vulnerability scanning, OWASP compliance checks, and security reviews.
$ npx -y skills add nyldn/claude-octopus --agent claude-codeHow it fires
How this agent gets triggered: by you, by Claude, or both.
- Fires itselfAuto-invocation. Claude auto-loads it when your prompt matches the work.Auto-invocation is when the right skill fires by itself at the right moment, driven by a FLOW.md router and a hook, instead of you invoking it by name. It is the difference between a skill being installed and a skill actually getting used.Read the full definition →
- You can call itInvoke it directly when you want it.
Context preview
The summary Claude sees to decide when to auto-load this agent.
Comprehensive security auditing skill leveraging the security-auditor persona. Use for vulnerability scanning, OWASP compliance checks, and security reviews.
Agent definition
security-audit.mdname: octopus-security-audit description: | Comprehensive security auditing skill leveraging the security-auditor persona. Use for vulnerability scanning, OWASP compliance checks, and security reviews.
Security Audit Skill
Invokes the security-auditor persona for thorough security analysis during the `ink` (deliver) phase.
Usage
# Via orchestrate.sh ./scripts/orchestrate.sh spawn security-auditor "Scan for SQL injection vulnerabilities" # Via auto-routing (detects security intent) ./scripts/orchestrate.sh auto "security audit the payment processing module"
Capabilities
- OWASP Top 10 vulnerability detection
- SQL injection and XSS scanning
- Authentication/authorization review
- Secrets and credential detection
- Dependency vulnerability assessment
- Security configuration review
Persona Reference
This skill wraps the `security-auditor` persona defined in:
- `agents/personas/security-auditor.md`
- CLI: `codex-review`
- Model: `gpt-5.2-codex`
- Phases: `ink`
- Expertise: `owasp`, `vulnerability-scanning`, `security-review`
Example Prompts
"Scan for hardcoded credentials in the codebase" "Check for CSRF vulnerabilities in form handlers" "Review the API authentication implementation" "Analyze the encryption at rest configuration"
Every AI model has blind spots. Claude Octopus supports ten external provider integrations — Codex, Gemini, Antigravity CLI, Copilot, Qwen, Ollama, Perplexity, OpenRouter, OpenCode, and Grok — alongside the built-in Claude Code host, with consensus gates that
Repo: nyldn/claude-octopus
Other agents on octo.
- backend-architect
Expert backend architect for scalable API design, microservices, and distributed systems. Masters REST/GraphQL/gRPC, event-driven patterns, service mesh, and resilience. Use PROACTIVELY for new backend services or APIs.
Open agent - cloud-architect
Expert cloud architect for AWS/Azure/GCP multi-cloud design, IaC (Terraform/CDK), FinOps, serverless, security, and compliance. Use PROACTIVELY for cloud architecture, cost optimization, or migration planning.
Open agent - code-reviewer
Elite code reviewer for AI-powered analysis, security vulnerabilities, performance, and production reliability. Masters static analysis, security scanning, and 2025/2026 best practices. Use PROACTIVELY for code quality.
Open agent - database-architect
Expert database architect for data layer design, technology selection, schema modeling, and scalable architectures. Masters SQL/NoSQL/TimeSeries, normalization, migration planning. Use PROACTIVELY for database architecture or data modeling.
Open agent - debugger
Debugging specialist for errors, test failures, and unexpected behavior. Use proactively when encountering any issues.
Open agent - docs-architect
Creates comprehensive technical documentation from existing codebases. Analyzes architecture, design patterns, and implementation details to produce long-form technical manuals and ebooks. Use PROACTIVELY for system documentation, architecture guides, or technical deep-dives.
Open agent