007 — Licença Para Auditar Skill · Testing Security
007 — Licença para Auditar
Run a full security audit with 8 domains including OWASP Top 10, STRIDE/PASTA threat modeling, and incident response.
Get AI-powered Red/Blue Team analysis for any project.
OWASP
STRIDE
Threat Modeling
Hardening
Incident Response
Red Team
About This Skill
Master security auditing with 8 specialized domains: code, infra, APIs, bots, payments, AI/agents, compliance, and operations. Covers OWASP Top 10 (Web/API/LLM), STRIDE/PASTA threat modeling, Red/Blue Team exercises, and incident response playbooks for any project.
Quick Start
1Install the 007 skill via Antigravity CLI
2Run 'antigravity audit --target <your-project>' to start a full scan
3Review the generated report with OWASP findings, threat models, and hardening recommendations
Example Command
antigravity skill use 007 --input "Audit my Node.js API for OWASP Top 10 and STRIDE threats"
Core Capabilities
Code Security
SAST analysis for Python, Node/JS, supply chain checks, and dependency vulnerability scanning.
Infrastructure Security
Hardening for Linux/Ubuntu, Windows, SSH, firewall, containers, VPS, and cloud environments.
Threat Modeling (STRIDE/PASTA)
Apply STRIDE and PASTA methodologies to identify, classify, and prioritize threats across your system.
Incident Response & Compliance
Playbooks for incident response, observability, logging, and compliance with OWASP, LGPD/GDPR, SOC2, and Zero Trust.
Usage Examples
Before
API had no security review; 3 critical vulnerabilities exploitable via public endpoints.
After
All critical and high vulnerabilities patched; OWASP Top 10 compliance achieved; threat model documented.
Input
Run STRIDE threat model on my microservices architecture
Output
Identified 12 threats: 4 spoofing, 3 tampering, 2 repudiation, 1 information disclosure, 1 DoS, 1 elevation of privilege. Prioritized mitigation plan generated.
Input
Check my Kubernetes deployment for security hardening gaps
Output
Found 8 misconfigurations: privileged containers, missing network policies, default service accounts, and unencrypted secrets. Remediation commands provided.
SKILL.md
---
name: '007'
description: Security audit, hardening, threat modeling (STRIDE/PASTA), Red/Blue Team, OWASP checks, code review, incident response, and infrastructure security for any project.
risk: critical
source: community
date_added: '2026-03-06'
author: renat
tags:
- security
- audit
- owasp
- threat-modeling
- hardening
- pentest
tools:
- claude-code
- antigravity
- cursor
- gemini-cli
- codex-cli
---
# 007 — Licenca para Auditar
## Overview
Security audit, hardening, threat modeling (STRIDE/PASTA), Red/Blue Team, OWASP checks, code review, incident response, and infrastructure security for any project.
## When to Use This Skill
- When the user mentions "audite" or related topics
- When the user mentions "auditoria" or related topics
- When the user mentions "seguranca" or related topics
- When the user mentions "security audit" or related topics
- When the user mentions "threat model" or related topics
- When the user mentions "STRIDE" or related topics
## Do Not Use This Skill When
- The task is unrelated to 007
- A simpler, more specific tool can handle the request
- The user needs general-purpose assistance without domain expertise
## How It Works
O 007 opera como um **Chief Security Architect AI** com expertise em:
| Dominio | Especialidades |
|---------|---------------|
| **Codigo** | Python, Node/JS, supply chain, SAST, dependencias |
| **Infra** | Linux/Ubuntu, Windows, SSH, firewall, containers, VPS, cloud |
| **APIs** | REST, GraphQL, OAuth, JWT, webhooks, CORS, rate limit |
| **Bots/Social** | WhatsApp, Instagram, Telegram (anti-ban, rate limit, policies) |
| **Pagamentos** | PCI-DSS mindset, antifraude, idempotencia, webhooks financeiros |
| **IA/Agentes** | Prompt injection, jailbreak, isolamento, explosao de custo, LLM security |
| **Compliance** | OWASP Top 10 (Web/API/LLM), LGPD/GDPR, SOC2, Zero Trust |
| **Operacoes** | Observabilidade, logging, resposta a incidentes, playbooks |
## 007 — Licenca Para Auditar
Agente Supremo de Seg
Frequently Asked Questions
FAQ
Which tools and IDEs are compatible with the 007 skill?
007 works with Claude Code, Antigravity, Cursor, Gemini CLI, and Codex CLI. It can be invoked via the Antigravity CLI or integrated into your CI/CD pipeline.
Who is the target audience for this security audit skill?
Developers, DevOps engineers, security analysts, and technical leads who need AI-assisted security auditing, threat modeling, and hardening for any project — from startups to enterprise.
How is 007 different from traditional security scanners?
Unlike static scanners, 007 acts as a Chief Security Architect AI, covering 8 domains (code, infra, APIs, bots, payments, AI/agents, compliance, operations) with STRIDE/PASTA threat modeling, Red/Blue Team simulation, and incident response playbooks.
What languages and frameworks does 007 support?
It supports Python, Node.js/JavaScript, and general supply chain analysis. For infrastructure, it covers Linux/Ubuntu, Windows, containers, and cloud. API security includes REST, GraphQL, OAuth, JWT, and webhooks.
What kind of results can I expect after running a 007 audit?
You get a prioritized vulnerability report with OWASP classifications, a STRIDE/PASTA threat model, hardening recommendations, and incident response playbooks. Typical audits find 5-15 issues, with critical and high severity items resolved within hours.
Discussion
Discussion
0 comments
U
On This Page
Trigger Phrases
Use these phrases to activate this skill in your AI coding assistant:
