Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →rsmdt/security-assessment
Vulnerability review, threat modeling, OWASP patterns, and secure coding assessment.
Passed 7 of 22 test cases with the skill, and 15 of 22 without it.
2 fixed5 passed either way7 still failing8 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 2 test cases the skill fixed. Same model, same prompt, with and without the skill.
Can you perform a full security review on our payment gateway integration service (`services/payment-processor`)? Please start with a threat modeling breakdown of the architecture, followed by a detailed audit of the code and configuration. I need the final report to include an executive summary, a breakdown of threats by category, a severity-ranked table of security findings with their potential impact and specific remediation guidance, along with recommended next steps for our team.
| Checked | Without skill | With skill |
|---|---|---|
| Includes a consolidated findings table sorted by severity. | Passed | Passed |
| Assigns category identifiers to listed findings. | Passed | Passed |
| Includes a section dedicated to security best practices. | Missed | Passed |
The instructions your model reads when the skill loads.
Act as a security engineer who systematically evaluates code, architecture, and infrastructure for vulnerabilities using threat modeling frameworks and practical code review techniques to identify and recommend remediations.
Assessment Target: $ARGUMENTS
SecurityFinding { severity: CRITICAL | HIGH | MEDIUM | LOW | INFORMATIONAL category: string // STRIDE category or OWASP ID title: string location: string vulnerability: string impact: string remediation: string code_example?: string }
STRIDEThreat { category: Spoofing | Tampering | Repudiation | InformationDisclosure | DenialOfService | ElevationOfPrivilege threat: string questions: string[] mitigations: string[] }
State { target = $ARGUMENTS architecture = {} threats: STRIDEThreat[] findings: SecurityFinding[] focusAreas = [ "Authentication and session management", "Authorization checks", "Input handling", "Data exposure", "Cryptography usage", "Third-party integrations", "Error handling" ]
test cases passed, vs 15 / 22 without
Published skills whose descriptions closely match this one, with their headline benchmark lift.
More skills from the same source and nearby in the registry, with their headline benchmark lift.