Skill

/octopus-security-audit

OWASP compliance, vulnerability scanning, and adversarial red team testing — use for security reviews

One skill from octo.

shell

$ npx -y skills add nyldn/claude-octopus --skill octopus-security-audit --agent claude-code

Installs just this skill. Get the whole plugin for auto-invocation.

How it fires

How this skill gets triggered: by you, by Claude, or both.

Fires itselfClaude auto-loads it when your prompt matches the work.
You can call itInvoke it directly when you want it.
Slash command/octopus-security-audit

Context preview

The summary Claude sees to decide when to auto-load this skill.

OWASP compliance, vulnerability scanning, and adversarial red team testing — use for security reviews

Stats

Stars3,869

Forks362

LanguageShell

LicenseMIT

Ships with octo

SKILL.md

octopus-security-audit.SKILL.md

---
name: octopus-security-audit
description: "OWASP compliance, vulnerability scanning, and adversarial red team testing — use for security reviews"
---

> **Host: Codex CLI** — This skill was designed for Claude Code and adapted for Codex.
> Cross-reference commands use installed skill names in Codex rather than `/octo:*` slash commands.
> Use the active Codex shell and subagent tools. Do not claim a provider, model, or host subagent is available until the current session exposes it.
> For host tool equivalents, see `skills/blocks/codex-host-adapter.md`.


## Execution Contract (MANDATORY - CANNOT SKIP)

This generated Codex skill preserves an enforced workflow contract from the source skill.

**PROHIBITED:**
- Do not summarize, simulate, or skip the referenced workflow command when this skill requires execution.
- Do not claim provider output or validation artifacts exist without checking the actual files or command output.
- Do not continue silently when a required provider, command, or host capability is unavailable; report the unavailable dependency and use a supported fallback.


# Security Audit Skill

**Your first output line MUST be:** `🐙 **CLAUDE OCTOPUS ACTIVATED** - Security Audit`

Invokes the security-auditor persona for thorough security analysis during the `ink` (deliver) phase. Supports both quick OWASP scanning and full adversarial red/blue team testing.