{
  "schema_version": "2026-03-26",
  "id": "security-auditor",
  "slug": "security-auditor",
  "display_name": "Security Auditor",
  "description": "Security audit workflow skill. Use this skill when a user needs a focused review of concrete security risks instead of a generic review.",
  "version": "0.0.1",
  "category": "testing-security",
  "raw_category": "testing-security",
  "taxonomy": {
    "raw_category": "testing-security",
    "canonical_category": "testing-security",
    "inferred_category": "testing-security",
    "category_source": "frontmatter"
  },
  "tags": [
    "security",
    "audit",
    "review",
    "threat-modeling",
    "hardening"
  ],
  "complexity": "advanced",
  "risk": "safe",
  "source": "omni-team",
  "author": "Omni Skills Team",
  "dates": {
    "added": "2026-03-26",
    "updated": "2026-03-27"
  },
  "entrypoint": "skills/security-auditor/SKILL.md",
  "paths": {
    "root": "skills/security-auditor",
    "manifest": "dist/manifests/security-auditor.json",
    "metadata": "skills/security-auditor/metadata.json"
  },
  "compatibility": {
    "tools": [
      "claude-code",
      "cursor",
      "gemini-cli",
      "codex-cli",
      "antigravity",
      "opencode"
    ],
    "install_targets": [
      {
        "tool": "claude-code",
        "scope": "user-global",
        "default_path": "~/.claude/skills",
        "installer_flag": "--claude",
        "current_installer_behavior": "Installs the full Omni Skills library by default. Use --skill or --bundle to install only a selected subset.",
        "invocation": ">> /skill-name help me..."
      },
      {
        "tool": "cursor",
        "scope": "user-global",
        "default_path": "~/.cursor/skills",
        "installer_flag": "--cursor",
        "current_installer_behavior": "Installs the full Omni Skills library by default. Use --skill or --bundle to install only a selected subset.",
        "invocation": "@skill-name"
      },
      {
        "tool": "gemini-cli",
        "scope": "user-global",
        "default_path": "~/.gemini/skills",
        "installer_flag": "--gemini",
        "current_installer_behavior": "Installs the full Omni Skills library by default. Use --skill or --bundle to install only a selected subset.",
        "invocation": "Use @skill-name to..."
      },
      {
        "tool": "codex-cli",
        "scope": "user-global",
        "default_path": "~/.codex/skills",
        "installer_flag": "--codex",
        "current_installer_behavior": "Installs the full Omni Skills library by default. Use --skill or --bundle to install only a selected subset.",
        "invocation": "Use @skill-name to..."
      },
      {
        "tool": "antigravity",
        "scope": "user-global",
        "default_path": "~/.gemini/antigravity/skills",
        "installer_flag": "--antigravity",
        "current_installer_behavior": "Installs the full Omni Skills library by default. Use --skill or --bundle to install only a selected subset.",
        "invocation": "Use @skill-name to... (Agent Mode)"
      },
      {
        "tool": "opencode",
        "scope": "project-local",
        "default_path": ".opencode/skills",
        "installer_flag": "--opencode",
        "current_installer_behavior": "Installs the full Omni Skills library by default. Use --skill or --bundle to install only a selected subset.",
        "invocation": "opencode run @skill-name"
      }
    ]
  },
  "resources": {
    "sub_resources": [
      "agents",
      "examples",
      "references",
      "scripts"
    ],
    "artifacts_count": 8,
    "references_count": 1,
    "agents_count": 1,
    "assets_count": 0
  },
  "dependencies": {
    "skills": [],
    "external": []
  },
  "install": {
    "strategy": "copy-skill-directory",
    "current_installer": "npx omni-skills installs the full library by default today, and also supports selective installation with --skill and --bundle.",
    "recipes": [
      {
        "tool": "claude-code",
        "command": "npx omni-skills --claude",
        "scope": "user-global",
        "default_path": "~/.claude/skills",
        "behavior": "Installs the full Omni Skills library by default. Use --skill or --bundle to install only a selected subset."
      },
      {
        "tool": "cursor",
        "command": "npx omni-skills --cursor",
        "scope": "user-global",
        "default_path": "~/.cursor/skills",
        "behavior": "Installs the full Omni Skills library by default. Use --skill or --bundle to install only a selected subset."
      },
      {
        "tool": "gemini-cli",
        "command": "npx omni-skills --gemini",
        "scope": "user-global",
        "default_path": "~/.gemini/skills",
        "behavior": "Installs the full Omni Skills library by default. Use --skill or --bundle to install only a selected subset."
      },
      {
        "tool": "codex-cli",
        "command": "npx omni-skills --codex",
        "scope": "user-global",
        "default_path": "~/.codex/skills",
        "behavior": "Installs the full Omni Skills library by default. Use --skill or --bundle to install only a selected subset."
      },
      {
        "tool": "antigravity",
        "command": "npx omni-skills --antigravity",
        "scope": "user-global",
        "default_path": "~/.gemini/antigravity/skills",
        "behavior": "Installs the full Omni Skills library by default. Use --skill or --bundle to install only a selected subset."
      },
      {
        "tool": "opencode",
        "command": "npx omni-skills --opencode",
        "scope": "project-local",
        "default_path": ".opencode/skills",
        "behavior": "Installs the full Omni Skills library by default. Use --skill or --bundle to install only a selected subset."
      }
    ]
  },
  "classification": {
    "maturity": {
      "skill_level": 3,
      "skill_level_label": "resources",
      "has_scripts": true,
      "has_extra_files": true
    },
    "best_practices": {
      "score": 99,
      "tier": "excellent",
      "signals": {
        "workflow_steps_count": 5,
        "workflow_section_length": 611,
        "when_to_use_section_length": 287,
        "best_practices_items_count": 6,
        "best_practices_section_length": 496,
        "troubleshooting_items_count": 0,
        "troubleshooting_section_length": 740,
        "resources_items_count": 5,
        "resources_section_length": 461,
        "examples_section_length": 823,
        "examples_code_blocks_count": 6,
        "related_skills_section_length": 319,
        "decision_assets_count": 17,
        "table_count": 6,
        "linked_resource_families_count": 4,
        "linked_resource_families": [
          "agents",
          "examples",
          "references",
          "scripts"
        ],
        "support_links_count": 5,
        "support_files_count": 6,
        "references_files_count": 1,
        "scripts_files_count": 1,
        "examples_files_count": 3,
        "agents_files_count": 1,
        "assets_files_count": 0,
        "tools_count": 6,
        "tags_count": 5,
        "body_density": 6.27
      }
    },
    "quality": {
      "score": 97,
      "tier": "platinum",
      "breakdown": {
        "body": 16,
        "description": 9,
        "metadata": 12,
        "recency": 8,
        "resources": 10,
        "best_practices": 10,
        "semantic_depth": 16,
        "operational_depth": 10,
        "support_pack": 10
      }
    },
    "security": {
      "score": 95,
      "tier": "review",
      "status": "passed",
      "findings_count": 0,
      "findings": [],
      "signals": {
        "scanned_files": 7,
        "script_files": 1,
        "binary_like_files": 0
      },
      "scanners": {
        "static": {
          "enabled": true,
          "status": "completed"
        },
        "clamav": {
          "enabled": true,
          "status": "completed",
          "provider": "clamav",
          "detections": [],
          "infected_files": 0
        },
        "virustotal": {
          "enabled": true,
          "status": "completed",
          "provider": "virustotal",
          "lookups": 1,
          "positives": 0,
          "results": [
            {
              "path": "skills/security-auditor/scripts/render_audit_plan.py",
              "sha256": "c95080367c1035c914e254ebe038150f75b59f09b03b72b451a6a83d7fab1a1a",
              "status": "not_found"
            }
          ],
          "details": "Hash lookups only. Unknown files are not uploaded during validation."
        }
      }
    },
    "validation": {
      "errors": [],
      "warnings": [],
      "status": "passed"
    }
  },
  "content": {
    "body_length": 5292,
    "content_length": 5785,
    "body_lines": 114,
    "word_count": 715,
    "has_code_blocks": true,
    "typed_code_blocks_count": 2,
    "has_examples_section": true,
    "example_count": 3,
    "has_workflow_section": true,
    "has_when_to_use_section": true,
    "has_best_practices_section": true,
    "has_troubleshooting_section": true,
    "problem_count": 3,
    "troubleshooting_pairs_count": 2,
    "has_additional_resources_section": true,
    "has_related_skills_section": true,
    "related_skills_count": 3,
    "has_local_support_links": true,
    "local_support_links_count": 2,
    "has_local_script_example": true,
    "local_script_example_count": 0,
    "semantic_signals": {
      "workflow_steps_count": 5,
      "workflow_section_length": 611,
      "when_to_use_section_length": 287,
      "best_practices_items_count": 6,
      "best_practices_section_length": 496,
      "troubleshooting_items_count": 0,
      "troubleshooting_section_length": 740,
      "resources_items_count": 5,
      "resources_section_length": 461,
      "examples_section_length": 823,
      "examples_code_blocks_count": 6,
      "related_skills_section_length": 319,
      "decision_assets_count": 17,
      "table_count": 6,
      "linked_resource_families_count": 4,
      "linked_resource_families": [
        "agents",
        "examples",
        "references",
        "scripts"
      ],
      "support_links_count": 5,
      "support_files_count": 6,
      "references_files_count": 1,
      "scripts_files_count": 1,
      "examples_files_count": 3,
      "agents_files_count": 1,
      "assets_files_count": 0,
      "tools_count": 6,
      "tags_count": 5,
      "body_density": 6.27
    }
  },
  "artifacts": [
    {
      "path": "skills/security-auditor/SKILL.md",
      "kind": "entrypoint",
      "size_bytes": 5803,
      "sha256": "2b92d94f2e7a49b50b708a260b8d269ba2e79ec1560c0cab6ede5f80fbaa8bc4"
    },
    {
      "path": "skills/security-auditor/metadata.json",
      "kind": "support",
      "size_bytes": 6062,
      "sha256": "4965cbde5bf69390814a63e3b584e6d7e86b3978db59cab0a0b8e7183cebaeb5"
    },
    {
      "path": "skills/security-auditor/agents/openai.yaml",
      "kind": "agent",
      "size_bytes": 272,
      "sha256": "3df67fbc53aa1adb14426449d5b65c1ae1206341ecc7297d17ed96ac8492b364"
    },
    {
      "path": "skills/security-auditor/examples/finding-severity-rubric.md",
      "kind": "support",
      "size_bytes": 517,
      "sha256": "51b05c8cd2982c2898b6ae29426ccd7a800b861c11e74d904686001ffe41dccc"
    },
    {
      "path": "skills/security-auditor/examples/release-pipeline-audit-packet.md",
      "kind": "support",
      "size_bytes": 292,
      "sha256": "af24630a0f7d4c18e92b8570e216d1104e72557973402648cdaf35feb15c8583"
    },
    {
      "path": "skills/security-auditor/examples/threat-model-worksheet.md",
      "kind": "support",
      "size_bytes": 251,
      "sha256": "29cad6ed79cc885665992227c818a53815be7b274e2b87f78dc04f06d76c45b6"
    },
    {
      "path": "skills/security-auditor/references/checklist.md",
      "kind": "reference",
      "size_bytes": 663,
      "sha256": "33d16b43af96b1a7009a3708efcb8a839747e19e399c59efa2ecb866675ac490"
    },
    {
      "path": "skills/security-auditor/scripts/render_audit_plan.py",
      "kind": "support",
      "size_bytes": 798,
      "sha256": "c95080367c1035c914e254ebe038150f75b59f09b03b72b451a6a83d7fab1a1a"
    }
  ],
  "archives": [
    {
      "format": "zip",
      "path": "dist/archives/security-auditor.zip",
      "file_name": "security-auditor.zip",
      "size_bytes": 15960,
      "sha256": "118ad1517b36766b925f16832114fd838de97e51847285ea94d693fbe8bb82cf",
      "signature": {
        "status": "signed",
        "path": "dist/archives/security-auditor.zip.sig",
        "sha256": "4f52049f40365bef6d096577931cd70daa665dea27d64d489a1db44c5f53b340",
        "public_key_path": "dist/signing/omni-skills-public.pem",
        "algorithm": "sha256",
        "verify_command": "openssl dgst -sha256 -verify dist/signing/omni-skills-public.pem -signature dist/archives/security-auditor.zip.sig dist/archives/security-auditor.zip"
      }
    },
    {
      "format": "tar.gz",
      "path": "dist/archives/security-auditor.tar.gz",
      "file_name": "security-auditor.tar.gz",
      "size_bytes": 30743,
      "sha256": "cd8941dbb5b904e0f61f5002c4fb31782f1c87b26808466b5469b8ee51dc488b",
      "signature": {
        "status": "signed",
        "path": "dist/archives/security-auditor.tar.gz.sig",
        "sha256": "a41cacbb240243337daa7497ecbc00921f4b36ac978e5624b4ed15ec79ca1e0a",
        "public_key_path": "dist/signing/omni-skills-public.pem",
        "algorithm": "sha256",
        "verify_command": "openssl dgst -sha256 -verify dist/signing/omni-skills-public.pem -signature dist/archives/security-auditor.tar.gz.sig dist/archives/security-auditor.tar.gz"
      }
    }
  ],
  "archive_checksums": {
    "path": "dist/archives/security-auditor.checksums.txt",
    "file_name": "security-auditor.checksums.txt",
    "sha256": "55353e13a16fdf269d2acf1b34f7e92f8cc939ed63d93a035383f11066058bdc",
    "signature": {
      "status": "signed",
      "path": "dist/archives/security-auditor.checksums.txt.sig",
      "sha256": "250b42da442c90dac5831cbe91df275bd2501b95c4616a575f4fda66c43769e5",
      "public_key_path": "dist/signing/omni-skills-public.pem",
      "algorithm": "sha256",
      "verify_command": "openssl dgst -sha256 -verify dist/signing/omni-skills-public.pem -signature dist/archives/security-auditor.checksums.txt.sig dist/archives/security-auditor.checksums.txt"
    }
  },
  "checksums": {
    "entrypoint_sha256": "2b92d94f2e7a49b50b708a260b8d269ba2e79ec1560c0cab6ede5f80fbaa8bc4",
    "package_sha256": "ac004fd470d53386480373f2d20b94975f70f7f4a0fbc3a37dd5a19dfcb38eae"
  }
}