mcpField
S
security

security

github.com/danielmiesslerSecurity19.7k87 installsUpdated 2d ago
Repository

About security

A security skill for authorized reconnaissance, OWASP-oriented web assessment, and threat modeling. It guides evidence-based findings, severity ratings, and remediation.

Key features

  1. 01Subdomain and DNS reconnaissance
  2. 02Port scanning and fingerprinting
  3. 03OWASP web assessment
  4. 04STRIDE threat modeling
  5. 05Evidence, severity, and remediation guidance

Use cases

  1. 01Map a domain's exposed services
  2. 02Review web authentication and input handling
  3. 03Assess threats and plan mitigations

Install

Copy the command and run it in a terminal.

$npx skills add https://github.com/danielmiessler/lifeos --skill security

After installing, type/securityin Claude Code to confirm it loaded.

Details

From the project README

Security Skill

Capabilities

Reconnaissance
  • Subdomain enumeration
  • DNS analysis
  • WHOIS lookup
  • Port scanning
  • ASN mapping
  • Technology fingerprinting
Web Assessment (OWASP)
  • Authentication testing
  • Authorization testing
  • Input validation
  • Session management
  • Error handling
  • Cryptography review
Threat Modeling
  • STRIDE framework
  • Attack surface mapping
  • Risk assessment matrix
  • Mitigation recommendations

Tools

Use these CLI tools when available:

  • nmap — Port scanning
  • ffuf — Web fuzzing
  • dig / whois — DNS/WHOIS
  • curl — HTTP testing
  • jq — JSON parsing

Rules

  • Only perform authorized testing
  • Document all findings with evidence
  • Rate severity: Critical > High > Medium > Low > Info
  • Provide remediation for each finding

Comments

Markdown supported