sparkfinderoven-security-compliance-suite
Find security gaps before your software ships.
What it does
Produces vulnerability findings, compliance assessments, threat models, and incident-response playbooks for software projects.
When to use it
Use for vulnerability scans, dependency CVE checks, compliance audits, threat modeling, secret detection, or incident-response playbooks.
How to use it
Give it a security or compliance task for a project; it returns structured findings and prioritized action plans.
What you provide
- An existing project
Uses
What you need · 5
Cloud provider credentials enable IAM audits; the environment examples select an AWS profile, Azure subscription, or GCP project.
An optional environment variable supplies an API key for the NVD CVE database integration.
Access · 4
This skill
nvd
Checks NVD vulnerability data
github-advisory
Checks GitHub vulnerability advisories