ccc-security
Installation
SKILL.md
ccc-security
Load ONE skill. Get the entire application security domain. From proactive auditing to reactive incident response, with AI-specific defenses included.
Sub-Skills
| # | Skill | Command | Description |
|---|---|---|---|
| 1 | security-audit | /security-audit |
Comprehensive security audit — SAST, DAST, manual review |
| 2 | prompt-injection-defense | /prompt-injection-defense |
Defend AI-powered apps against prompt injection attacks |
| 3 | dependency-audit | /dependency-audit |
Audit npm/pip/cargo dependencies for known vulnerabilities |
| 4 | secrets-scanner | /secrets-scanner |
Scan codebase for hardcoded secrets, API keys, tokens |
| 5 | owasp-top-10 | /owasp-top-10 |
Check application against OWASP Top 10 vulnerabilities |
| 6 | codeql-integration | /codeql-integration |
Set up CodeQL for automated security analysis in CI |
| 7 | variant-analysis | /variant-analysis |
Find variants of known vulnerabilities across codebase |
| 8 | incident-response | /incident-response |
Security incident response playbook and remediation |