skills.rest
tektonlabs
tektonlabsOFFICIAL
Explore all skills by this author →
WebsiteGitHub

security-assessment

Generate security assessment documents summarizing posture, findings, risks, and remediation recommendations.

Updated Aug 26, 2026
Search Tags:#vulnerability#owasp#penetration testing#compliance#governance#risk assessment#security assessment
One-click install
npx skills add https://github.com/tektonlabs/ai-software-design --skill security-assessment-tektonlabs
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-assessment
Source: https://github.com/tektonlabs/ai-software-design/tree/main/.claude/skills/security/security-assessment
Command: npx skills add https://github.com/tektonlabs/ai-software-design --skill security-assessment-tektonlabs

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Security reviews produce scattered findings across SAST, DAST, pentest, and compliance checks, and teams lack a single signed document that consolidates posture, severity-ranked findings, and remediation plans for governance sign-off. ## Core Features & Use Cases - Consolidated Findings Summary: Aggregates findings by severity and category (OWASP), with trend analysis against previous assessments. - Compliance & Controls Assessment: Maps gaps against standards like GDPR, SOC 2, and PCI-DSS, and rates control effectiveness (WAF, MFA, encryption, logging). - Risk & Remediation Planning: Produces a risk heat map plus prioritized immediate, short-term, and long-term action plans with owners and deadlines. - Use Case: Before a production deployment, run this Skill to compile pentest and scan results into a CISO-signed security assessment that gates the release and feeds the vulnerability report. ## Quick Start Ask the agent to create a security assessment for your project using the latest SAST, DAST, and pentest results.

Frequently Asked Questions about security-assessment

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I create a security assessment report from SAST and DAST results?▼

Provide the project name, assessment scope, testing methods used (SAST, DAST, pentest), and compliance requirements. The Skill generates a structured Markdown report with findings by severity, category, risk assessment, and prioritized remediation actions.

What compliance standards does a security assessment cover?▼

The generated document maps compliance status against standards such as GDPR Article 32, SOC 2 controls, and PCI-DSS requirements. It lists gaps per requirement with impact and remediation actions.

What documents must exist before running a security assessment?▼

The software architecture document and the nonfunctional specification must both exist and be signed. The Skill blocks execution until these prerequisite documents are approved, per its validation rules.

Who approves the security assessment document?▼

The CISO holds final approval authority over the security assessment. The Technical Lead confirms the remediation approach, while the Solution Architect and DevOps Lead provide non-gating content reviews.

Why is the security assessment blocked from running?▼

Execution is blocked when prerequisite documents are unsigned, the output is not at its canonical path, placeholders remain, sections are empty, or cross-references point to missing documents. Resolve the reported validation failure and rerun.

Related Skills

Explore More Software Engineering Skills→
mbuycombuyco

system-design

Designs system architectures and produces structured design documents.

Community
Basic
Harvest-Forged-CodeHarvest-Forged-Code
10

security-audit

Audit codebases for OWASP Top 10 vulnerabilities, hardcoded secrets, and vulnerable dependencies.

Official
Advanced
rnavarychrnavarych
14

role-aqa:security-testing

Your response is missing. Please try again.

Community
Advanced
lm93129lm93129
2

independence-check

Assess audit team independence by analyzing financial interests and business relationships.

Community
Intermediate