senior-security

Automate threat modeling, security auditing, and penetration testing workflows with Python scripts.

Updated Jul 7, 2026
One-click install
npx skills add https://github.com/singhaganesh/Urban-assist --skill senior-security-singhaganesh
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: senior-security
Source: https://github.com/singhaganesh/Urban-assist/tree/main/.cursor/skills/senior-security
Command: npx skills add https://github.com/singhaganesh/Urban-assist --skill senior-security-singhaganesh

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve? Security assessments like threat modeling, code auditing, and penetration testing are time-consuming and inconsistent when done manually. This Skill provides structured automation scripts and reference guides to standardize security engineering work across projects. ## Core Features & Use Cases - Threat Modeler: Run scripts/threat_modeler.py against a project path to scaffold and analyze threat models with verbose or JSON output. - Security Auditor: Execute scripts/security_auditor.py on a target directory to perform automated security analysis and generate findings reports. - Pentest Automator: Use scripts/pentest_automator.py to automate penetration testing tasks with configurable arguments and JSON export. - Reference Guides: Consult references/ for security architecture patterns, penetration testing workflows, and cryptography implementation guidance. - Use Case: Before shipping a new web app, run the security auditor against the codebase, review the findings report, then follow the cryptography implementation reference to fix identified weaknesses. ## Quick Start Ask the AI to run the security auditor script against your project directory and summarize the findings report.

Frequently Asked Questions about senior-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a security audit on my codebase with Python?▼

Run scripts/security_auditor.py with the target path as an argument, for example: python scripts/security_auditor.py ./my-project --verbose. The script validates the target, performs analysis, and prints a findings report, with an optional --json flag for machine-readable output.

How to automate threat modeling for an application?▼

Use scripts/threat_modeler.py by passing your project path: python scripts/threat_modeler.py <project-path>. It scaffolds the threat modeling process and outputs results, which you can export to a file using the --output option combined with --json.

What Python dependencies does the security automation require?▼

The scripts use only Python standard library modules: os, sys, json, argparse, pathlib, and typing. No pip installation of third-party packages is required, so they run in any standard Python 3 environment.

Can I export security audit results as JSON?▼

Yes, all three scripts support a --json flag to format results as JSON and an --output option to write them to a file. This makes it straightforward to feed findings into CI pipelines or reporting dashboards.

What are the limitations of automated penetration testing scripts?▼

Automated scripts provide scaffolding and standardized analysis but cannot replace manual exploitation techniques or business-logic testing. Use the references/penetration_testing_guide.md for full manual workflows and treat script output as a starting point for deeper review.