007 — Licença Para Auditar Skill · Testing Security
007 — The Ultimate Security Audit & Hardening Agent
Master security with 007.
Perform OWASP checks, STRIDE threat modeling, and infrastructure hardening across 8+ domains. Secure your code today!
security
audit
owasp
threat-modeling
hardening
pentest
About This Skill
Deploy the 007 agent to master security across 8 specialized domains, including Code, Infra, APIs, and AI/Agents. It provides deep expertise in SAST, supply chain, and compliance.
Quick Start
1Install the 007 skill into your Antigravity environment
2Point the agent to your repository or infrastructure config
3Run 'audite' to trigger a full STRIDE/OWASP security scan
Example Command
antigravity use 007 --mode=audit --target=./my-api
Core Capabilities
Codigo
Deep analysis of Python, Node/JS, supply chain security, SAST, and dependency vulnerabilities.
Infra
Hardening Linux/Ubuntu, Windows, SSH, firewalls, containers, VPS, and cloud environments.
Defending against prompt injection, jailbreak, isolation issues, and LLM cost explosion.
Usage Examples
Input
Audite my Python FastAPI backend for OWASP vulnerabilities.
Output
Found 3 vulnerabilities: Broken Object Level Authorization, SQL Injection risk, and missing CORS headers. Recommended fixes provided.
Input
Perform a STRIDE threat model on our new WhatsApp Bot integration.
Output
Identified Spoofing risks in webhook signatures and Tampering risks in message payload processing.
Before
FROM python:3.9 (Running as root, large attack surface)
After
FROM python:3.9-slim (Running as non-root, minimal attack surface)
SKILL.md
---
name: '007'
description: Security audit, hardening, threat modeling (STRIDE/PASTA), Red/Blue Team, OWASP checks, code review, incident response, and infrastructure security for any project.
risk: critical
source: community
date_added: '2026-03-06'
author: renat
tags:
- security
- audit
- owasp
- threat-modeling
- hardening
- pentest
tools:
- claude-code
- antigravity
- cursor
- gemini-cli
- codex-cli
---
# 007 — Licenca para Auditar
## Overview
Security audit, hardening, threat modeling (STRIDE/PASTA), Red/Blue Team, OWASP checks, code review, incident response, and infrastructure security for any project.
## When to Use This Skill
- When the user mentions "audite" or related topics
- When the user mentions "auditoria" or related topics
- When the user mentions "seguranca" or related topics
- When the user mentions "security audit" or related topics
- When the user mentions "threat model" or related topics
- When the user mentions "STRIDE" or related topics
## Do Not Use This Skill When
- The task is unrelated to 007
- A simpler, more specific tool can handle the request
- The user needs general-purpose assistance without domain expertise
## How It Works
O 007 opera como um **Chief Security Architect AI** com expertise em:
| Dominio | Especialidades |
|---------|---------------|
| **Codigo** | Python, Node/JS, supply chain, SAST, dependencias |
| **Infra** | Linux/Ubuntu, Windows, SSH, firewall, containers, VPS, cloud |
| **APIs** | REST, GraphQL, OAuth, JWT, webhooks, CORS, rate limit |
| **Bots/Social** | WhatsApp, Instagram, Telegram (anti-ban, rate limit, policies) |
| **Pagamentos** | PCI-DSS mindset, antifraude, idempotencia, webhooks financeiros |
| **IA/Agentes** | Prompt injection, jailbreak, isolamento, explosao de custo, LLM security |
| **Compliance** | OWASP Top 10 (Web/API/LLM), LGPD/GDPR, SOC2, Zero Trust |
| **Operacoes** | Observabilidade, logging, resposta a incidentes, playbooks |
## 007 — Licenca Para Auditar
Agente Supremo de Seg
Frequently Asked Questions
FAQ
Which tools are compatible with 007?
007 works seamlessly with Claude-Code, Antigravity, Cursor, Gemini-CLI, and Codex-CLI.
Who is the target audience for this skill?
It is designed for Developers, DevOps Engineers, and Security Architects looking to automate audits.
