Identify and remediate security findings in codebases using static analysis and AI-guided reviews.
npx skills add https://github.com/roderik/fold --skill security-audit-roderik
Please help me install this Agent Skill. Skill: security-audit Source: https://github.com/roderik/fold/tree/main/skills/audit Command: npx skills add https://github.com/roderik/fold --skill security-audit-roderik
Security audits in codebases are often fragmented between automated static analysis and manual reviews. This Skill provides a two-track architecture that wraps Trail of Bits plugins for language-agnostic auditing, supplying project-specific context and a unified workflow.
Run a complete security audit cycle against your project to generate findings and structured recommendations.
High-intent search queries and answers about installing and using this skill.
Run a complete security audit cycle against your codebase using a two-track approach that combines tool-based static analysis with AI-guided reviews. This process generates structured findings and actionable remediation recommendations.
A two-track security audit operates tool-based static analysis and AI-based deep reviews independently. Both tracks converge on a final assessment, integrating architectural context and trust boundaries to improve finding relevance.
Yes, static analysis for vulnerability management applies to CLI tools, web services, libraries, and deployment pipelines. The audit enables automated scans and human-guided reviews across these environments.
False positives are managed through a structured finding lifecycle that uses FP gates, confidence scoring, and human-in-the-loop decisioning. This lifecycle-driven approach ensures accurate remediation planning.
Yes, the security audit wraps Trail of Bits plugins for language-agnostic auditing. It supplies project-specific context, sharp-edges checks, and compliance checks to improve the review workflow.
The best way to manage findings in evolving codebases is using differential reviews and variant hunting. Cross-cutting capabilities like entry-point analysis and compliance checks drive structured remediation.
offers-pngIdentify and document security threats into a threat_model.md report.
stolinskiIdentify high-confidence security vulnerabilities in code and generate remediation reports.
allanninalHunt for similar vulnerabilities across codebases using pattern-based analysis.
vertivolatamRun static analysis across multiple programming languages with linters and security scanners.
