Security

---
name: Security
description: Security assessment and intelligence. USE WHEN recon, reconnaissance, port scan, subdomain, DNS, WHOIS, web assessment, pentest, vulnerability, security scan, prompt injection, jailbreak, LLM security, security news, breaches, annual reports, threat landscape, threat model, risk register, compromise scenario, documentation audit.
---

# Security - Security Assessment and Intelligence

**Category for skills that perform security testing, reconnaissance, and intelligence gathering.**

## Skills in This Category

| Skill | Purpose | Trigger |
|-------|---------|---------|
| **AnnualReports** | Security report and annual report analysis | "annual report", "security report", "threat report" |
| **PromptInjection** | LLM security and prompt injection testing | "prompt injection", "jailbreak", "LLM security" |
| **Recon** | Network and domain reconnaissance | "recon", "reconnaissance", "port scan", "subdomain" |
| **SECUpdates** | Security news and breach monitoring | "security news", "breaches", "security updates" |
| **ThreatModel** | Defensive threat modeling, risk register, documentation audit | "threat model", "risk register", "what if X got hacked", "documentation audit" |
| **WebAssessment** | Web application security testing | "web assessment", "pentest", "vulnerability scan" |

## When to Use

- Network reconnaissance and asset discovery
- Web application security testing and pentesting
- LLM security and prompt injection testing
- Security news monitoring and breach tracking
- Security report and annual report analysis

## Category Philosophy

Security skills operate with explicit authorization. They follow responsible disclosure and never target systems without permission.

## Customization

**Before executing, check for user customizations at:**
`~/.opencode/PAI/USER/SKILLCUSTOMIZATIONS/Security/`

If this directory exists, load and apply any PREFERENCES.md, configurations, or resources found there.