Claude Skill MartBrowse skillsQuick linesLearn by videoTerminal guideWhat is a Skill?
 
← Back to list

Security Research (Team-Mode Vulnerability Audit)

Runs 3 vulnerability hunters and 2 PoC engineers in parallel so only findings with a proven, reproducible attack path survive.

Security & ReviewAdvanced★ 69,202⑂ 5,700AI score 8/10Last updated: Sep 19, 2026

What it does

  • Runs a parallel security audit of a repo, PR, diff range, or release candidate using Team Mode.
  • Spins up 5 specialized members: attack-surface mapper, auth/authorization/data-isolation hunter, runtime & supply-chain hunter, and two PoC engineers who build and independently falsify proofs.
  • Uses CWE, OWASP WSTG/ASVS and CVSS v4.0 as the scoring frame, enforcing the rule that no severity is assigned without an attack path.
  • Outputs a verdict (PASS / PASS WITH FINDINGS / BLOCK), a findings table with CWE, exploitability, PoC and minimal fix, plus downgraded candidates and residual risk.
  • Forbids destructive exploits against real services; uses local fixtures, dry runs, or static proof instead.

Who it's for

  • opencode users running oh-my-openagent with team_mode enabled.
  • Teams doing pre-release security checks or threat-model validation.
  • Reviewers who want exploitability-driven reports instead of generic hardening advice.

Example uses

  1. Invoke /security-research with no target → it audits the current branch diff against the merge base.
  2. "Audit the upload and archive-extraction code in this PR" → hunters flag path traversal / command injection candidates, PoC engineers reproduce them with local fixtures.
  3. Full-repo pre-release audit → auth and tenant-isolation issues tabulated with CWE and fixes, while unreproducible candidates are listed with rejection rationale.

· · · Install guide · · ·

Try it now, no install

Paste this into Claude to use the skill without installing anything.

Read the instructions in this file and follow them to help me:
https://raw.githubusercontent.com/code-yeongyu/oh-my-openagent/HEAD/.agents/skills/security-research/SKILL.md

What I want: (describe your task here)

If Claude can't open the link, open it yourself and paste the contents instead.

↓ If it works for you, download the ZIP below and install it. Then it runs on its own — no pasting each time.

Install in the Claude app (no terminal)
  1. Download the ZIP with the button below.
  2. In Claude, open Settings → Capabilities and turn on 'Code execution and file creation'. (one time)
  3. Go to Customize → Skills → + → 'Upload a skill' and upload the ZIP.
↓ Download ZIP
Install in Claude Code

Let Claude do it — paste this into Claude Code

Install the skill I found on Claude Skill Mart.
Copy the .agents/skills/security-research folder from the GitHub repo code-yeongyu/oh-my-openagent into my ~/.claude/skills/security-research/.
When it's done, tell me in one line what this skill can do.

Install with a command instead

git clone https://github.com/code-yeongyu/oh-my-openagent.git /tmp/oh-my-openagent && mkdir -p ~/.claude/skills && cp -r /tmp/oh-my-openagent/.agents/skills/security-research ~/.claude/skills/

⚠ This is a third-party skill. Check the source repository before installing.

  1. Open a terminal.
  2. Clone the repository: git clone https://github.com/code-yeongyu/oh-my-openagent.git
  3. Create the skills folder: mkdir -p ~/.claude/skills
  4. Copy the skill: cp -r oh-my-openagent/.agents/skills/security-research ~/.claude/skills/
  5. Important: this skill requires team_* tools. Set team_mode.enabled: true in your oh-my-openagent config and restart opencode, otherwise the skill stops immediately.
  6. Restart your agent and ask for a "security review" or run security-research to confirm it triggers.
View source on GitHub ↗License: NOASSERTION