purple-team

Comprehensive purple team security assessment skill that analyzes codebases like a skilled penetration tester, identifies attack vectors, and provides remediation guidance. Use this skill when: (1) Performing security audits or code reviews, (2) Identifying vulnerabilities before deployment, (3) Running purple team exercises (offensive analysis + defensive remediation), (4) Checking for OWASP Top 10 vulnerabilities, (5) Scanning for hardcoded secrets, API keys, or credentials, (6) Analyzing authentication/authorization flaws, (7) Reviewing cryptographic implementations, (8) Auditing infrastructure-as-code (Terraform, K8s, Docker), (9) Generating security reports in Markdown, HTML, or JSON format. Triggers: "security audit", "purple team", "penetration test", "find vulnerabilities", "security review", "attack vectors", "remediate vulnerabilities", "OWASP", "security scan".