Security

---
name: security
description: Security assessment including reconnaissance, web assessment (OWASP), vulnerability analysis, threat modeling, and security news analysis. USE WHEN recon, reconnaissance, port scan, subdomain, DNS, WHOIS, web assessment, OWASP, pentest, vulnerability analysis, threat modeling, security trends, security research.
metadata:
  author: pai
  version: 1.0.0
---

# Security Skill

## Capabilities

### Reconnaissance
- Subdomain enumeration
- DNS analysis
- WHOIS lookup
- Port scanning
- ASN mapping
- Technology fingerprinting

### Web Assessment (OWASP)
- Authentication testing
- Authorization testing
- Input validation
- Session management
- Error handling
- Cryptography review

### Threat Modeling
- STRIDE framework
- Attack surface mapping
- Risk assessment matrix
- Mitigation recommendations

## Tools

Use these CLI tools when available:
- `nmap` — Port scanning
- `ffuf` — Web fuzzing
- `dig` / `whois` — DNS/WHOIS
- `curl` — HTTP testing
- `jq` — JSON parsing

## Rules

- Only perform authorized testing
- Document all findings with evidence
- Rate severity: Critical > High > Medium > Low > Info
- Provide remediation for each finding