Comprehensive Security Assessment Skill

Purpose

Run comprehensive security assessment covering OWASP Top 10 2025 and ASVS Level 1 requirements. This skill provides automated, full-codebase security analysis with real-time token monitoring, knowledge graph integration, and automated test generation.

On-disk fallback (when MCP unavailable): if run_security_assessment is not reachable, use the bundled checklists at ../security-reviewer/checklists/owasp-asvs.md (OWASP Top 10 ↔ ASVS L1 mapping) and ../security-reviewer/checklists/endpoint-checklist.md (per-endpoint review template), plus the language reference packs at ../security-reviewer/languages/*.md, to drive the workflow with the assistant's built-in tools (Read/Grep/Glob/Bash).

When to Use

• User asks to "run a security assessment" or "security audit"
• User mentions "OWASP Top 10" or "ASVS"
• User requests "security check" or "vulnerability assessment"
• User clicks the 🛡️ Security Assessment quick access button
• User wants comprehensive security analysis before release