Super security
SUPER Skills catalogue: portable Markdown agent skills for AI vibe coding, SEO, AI SEO/GEO, marketing, design, AI agents, DevOps, security, automation, data, business, and operations.
npx -y skills add arpitexplores/skills-super --skill super-securityAssembled from the repository path, not quoted from the project. Check it against their README if it does not work.
One thing to look at
- 1 stars1 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.
What its author says it does
Copied from the file, not written here
Security audits, threat modelling, testing, and remediation across apps, APIs, and infrastructure.
SKILL.md
1.6 KB, as published. Nobody here has run it
Super Security
Overview
Identify risks, test defenses, and ship actionable remediation.
User Intent Examples
- "Need help with Security Audits for my product/site."
- "Create a plan for Threat Modelling."
- "Audit or improve Web Security Testing."
Workflow
- Define scope, assets, and threat model.
- Review architecture and security controls.
- Run targeted security testing and audits.
- Prioritize findings by impact and exploitability.
- Deliver fixes and verification steps.
- Document residual risk and monitoring.
Minimal Intake Questions
- Primary goal or outcome
- Scope (pages, systems, teams, or timeframe)
- Constraints (tools, budget, timeline)
Output Format
- Threat model and scope
- Findings with severity and evidence
- Remediation plan
- Verification checklist
- Residual risk notes
Routing Map (Modules)
- Security Audits ->
references/modules/security-auditor.md - Threat Modelling ->
references/modules/threat-modelling-expert.md - Web Security Testing ->
references/modules/web-security-testing.md
Bundled References
references/modules/scripts/assets/agents/
Compatibility Notes
- If any module references slash commands or tool-specific paths, translate them into plain-language steps.
- Keep outputs platform-agnostic unless the user specifies a specific tool, stack, or agent.
Guardrails
- Do not perform unauthorized testing.
- Avoid exploit instructions without explicit permission.
- Separate confirmed findings from hypotheses.