Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →ling71671/gstack-cso
Security audit workflow for OPC code, providers, plugins, Electron surfaces, local HTTP bridges, filesystem access, and command execution.
Passed 12 of 23 test cases with the skill, and 12 of 23 without it.
and 1 more in the full report
3 fixed9 passed either way8 still failing3 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 3 test cases the skill fixed. Same model, same prompt, with and without the skill.
Our desktop application stores local provider OAuth refresh tokens in unencrypted `localStorage` and exposes a local HTTP bridge on `127.0.0.1:8080` without authentication headers. Audit these entrypoints for security risks.
| Checked | Without skill | With skill |
|---|---|---|
| The review flags unencrypted token storage in localStorage as a high severity finding. | Missed | Passed |
| The findings include recommended remediation steps to secure local bridge requests and token storage. | Passed | Passed |
The instructions your model reads when the skill loads.
Use this skill for a security review with OWASP and STRIDE lenses.
Prioritize OPC-specific attack surfaces:
For each finding include:
Also include a short "Not Findings" section for checked risks that are already mitigated.
test cases passed, vs 12 / 23 without
Published skills whose descriptions closely match this one, with their headline benchmark lift.
More skills from the same source and nearby in the registry, with their headline benchmark lift.