Security

---
name: security
description: Guidance on security analysis, compliance auditing, and vulnerability assessment techniques relevant to legal and regulatory compliance tasks
---

# Security Skill

This skill provides guidance on security analysis, compliance auditing, and vulnerability assessment techniques relevant to legal and regulatory compliance tasks.

## Available Sub-skills

### [Security Auditing](security-auditing.md)
Comprehensive security analysis including credential detection, OWASP vulnerability patterns, dependency scanning, and threat modeling. Useful for:
- Auditing system configurations for compliance
- Identifying security misconfigurations
- Detecting exposed credentials and secrets
- Assessing security controls

### [Access Control Review](access-control-review.md)
Techniques for analyzing and evaluating access control mechanisms. Useful for:
- Reviewing permission structures
- Assessing role-based access control (RBAC)
- Identifying access control gaps
- Verifying least privilege principles

### [Vulnerability Detection](vulnerability-detection.md)
Methods for identifying and assessing security vulnerabilities. Useful for:
- Finding common security weaknesses
- Assessing system vulnerabilities
- Evaluating security posture
- Prioritizing remediation efforts

## Quick Start

1. Identify the security aspect you need to assess (configuration, access control, vulnerabilities)
2. Refer to the appropriate sub-skill for detailed techniques
3. Use the provided frameworks and checklists
4. Document findings with severity levels and remediation recommendations

## Common Use Cases

- **HIPAA Compliance**: Use security-auditing for configuration review
- **Data Protection**: Use access-control-review for permission verification
- **System Hardening**: Use vulnerability-detection for gap analysis