Security Review (Grade A)Security-tested development skill for Claude AI. Grade A. Runs a guided, end-to-end security review of a Power Pages site and consolidates every finding into one HTML report covering the live site, br

— (0)

Reviewed by Daniel Nikulshyn·Updated July 2026

Overview

Security Review (Grade A) is a skill for Claude AI that performs a guided, end-to-end security review of a Power Pages site. It assesses threat modeling, vulnerability review, auth flow audit, dependency scanning, and provides a comprehensive HTML report. This skill is used for security audits of applications, infrastructure, or specific features, threat modeling before launch, penetration test preparation, and remediation guidance for dependency vulnerabilities. It handles sensitive data such as PII, payment, and health information, and verifies compliance with regulations like SOC 2, HIPAA, PCI-DSS, GDPR, and ISO 27001. The skill follows a five-phase methodology: authorization verification, scope definition, automated scanning, manual code review, and reporting. Automated scanning includes SAST, dependency audit, secrets detection, and container scanning. Manual review involves contextual analysis, authentication and authorization flow tracing, business logic vulnerabilities, and STRIDE threat modeling. The output includes a prioritized remediation roadmap and an HTML report detailing vulnerabilities, business impact, and corrective actions.

Key features

Threat modeling
Vulnerability review
Auth flow audit
Dependency scanning
SAST (Static Application Security Testing)
Secrets detection

Pricing

Model: Free
Category: Skills
Rating: No reviews yet

Use cases

Security Audit of Web Application

Perform a comprehensive security audit of a web application to identify vulnerabilities and provide remediation guidance.

Penetration Test Preparation

Conduct a security review to prepare for a penetration test, identifying potential vulnerabilities and weaknesses.

Compliance Verification

Verify compliance with regulations such as SOC 2, HIPAA, PCI-DSS, GDPR, and ISO 27001 through a comprehensive security review.

Pros & Cons

Pros

Comprehensive security assessment
Guided end-to-end security review
Prioritized remediation roadmap
Compliance verification
Detailed HTML report

Cons

Limited to Power Pages site
May require written authorization for active testing
Dependence on automated scanning tools

Reviews

No reviews yet. Be the first!

Q&A

How Skills Work Together

Every skill reads from startup-context first — your company's stage, product, market, team, and metrics. This shared context means skills produce output tailored to your specific startup, not generic advice. See each skill's Related Skills section for the full dependency map.

Asked by Zofia Kaczmarek · Feb 20, 2026

What are Skills?

Skills are markdown files that give AI agents specialized knowledge and workflows for specific tasks. When you add these to your project, your agent can recognize what you're working on and apply the right frameworks, templates, and best practices — so you get founder-grade output, not generic AI slop.

Asked by Tobias Hartmann · Nov 25, 2025

Who Is This For?

Solo technical founders building an MVP who also need to fundraise, sell, hire, and market — without a team to delegate to. First-time founders who know how to code but haven't written a pitch deck, cold email, or job description before. Small founding teams (2-3 people) wearing multiple hats and needing to move fast across every function. Technical co-founders who handle product and engineering but now need to step into sales, recruiting, or investor conversations. If you're at a company with a VP of Sales, a Head of Marketing, and in-house counsel — you probably don't need this. These skills are for founders who are the sales team, the marketing team, and the legal team, all at once.

Asked by Omar Haddad · Nov 15, 2025

Ask a question

Skills alternatives

Using Git Worktrees (Grade A)Skills

Security-tested data-ai skill for Claude AI. Grade A. Use when starting feature work that needs isolation from current workspace or before executing implementation plans - creates isolated git worktre

— (0)

Free

Ga4 Bigquery Schema (Grade A)Skills

Security-tested data-ai skill for Claude AI. Grade A. GA4 BigQuery Export Schema Reference — complete field reference, nested structures, query patterns, and performance tips

— (0)

Free

Meta Capi (Grade A)Skills

Security-tested data-ai skill for Claude AI. Grade A. Meta Conversions API (CAPI) Setup Reference — architecture, event types, customer information hashing, deduplication, implementation examples, AEM

— (0)

Free

Callees (Grade A)Skills

Security-tested development skill for Claude AI. Grade A. Lista o que uma funcao/metodo chama (call graph direto)

— (0)

Free

Test Module Name (Grade A)Skills

Security-tested data-ai skill for Claude AI. Grade A. Name Haskell test modules after the module under test with a Spec suffix in the same namespace. Use when writing or reviewing Haskell test module

— (0)

Free

Board Of Directors (Grade A)Skills

Security-tested data-ai skill for Claude AI. Grade A. Simulate a 5-member expert board deliberation for major decisions. Use when evaluating plans, architecture choices, feature designs, or any decisi

— (0)

Free

Advpl Mvc Avancado (Grade A)Skills

Security-tested development skill for Claude AI. Grade A. MVC avançado via PE (Pontos de Entrada) — adicionar grids customizadas em telas MVC padrão (CNTA300/MATA070/MATA440/MATA460/FINA040 via *STRU)

— (0)

Free

Docs Writer (Grade A)Skills

Security-tested devops skill for Claude AI. Grade A. **WORKFLOW SKILL** — Maintains repository documentation accuracy and freshness across the docs site, agent files, and changelog. WHEN: "update docs

— (0)

Free