Security Assessment

Assesses your project's security surface — detects stack, package managers, security tooling, and integrations. Generates config for ongoing scanning.

What it does

Generates .claude/sentinel.json config

Creates .claude/security/integrations.json with key patterns

Queries Context7 for security docs per detected integration

Other Sentinel skills

/sentinel:scanPRO

Full Security ScanCombines Semgrep static analysis and dependency audit. Writes findings to tasks-plans/tasks.md with severity mapping.

/sentinel:audit-depsFREE

Dependency CVE AuditFocused vulnerability audit. Reports CVEs with installed/fixed versions and exact upgrade commands.

/sentinel:headersFREE

HTTP Security HeadersAnalyzes security headers for a given URL. Context-aware grading based on exploitable risk, not checkbox compliance.

/sentinel:package-riskPRO

Package Risk AnalysisAnalyzes an installed package's source code for suspicious behavior patterns — eval calls, network requests, environment access, and obfuscation.

Learn the bigger picture

Try it in your terminal

Install free. No credit card required.