Esaa Security Audit
This applies event sourcing architecture to security auditing, giving you deterministic, reproducible results across 95 checks in 16 domains. Every finding gets logged to an immutable event store, so you can replay audits and verify that the same repo state produces identical findings. It's designed to prevent hallucination through schema validation and evidence requirements, which matters when you're actually trusting LLM output for security decisions. The PARCER contract system enforces token budgets and decision hygiene on the agents. You get a complete audit trail in `.roadmap/activity.jsonl` and structured reports with CWE/OWASP mappings. Probably overkill for quick scans, but if you need defensible, traceable security audits of AI-generated code or want to integrate automated security checks into a compliance workflow, the event sourcing approach makes sense.
- skills.sh installs
- 617
- GitHub stars
- 6
- last updated
- Jul 14, 2026
Install
$ npx -y skills add aradotso/security-skills --skill esaa-security-audit --agent claude-codeInstalls into .claude/skills of the current project.
Files
ESAA-Security Audit Skill
Skill by ara.so — Security Skills collection.
Overview
ESAA-Security applies the Event Sourcing for Autonomous Agents (ESAA) architecture to automated security auditing. It executes structured security audits across 16 security domains with 95 executable checks, governed by an immutable append-only event log. Every finding, classification, and remediation decision is recorded as a verifiable fact.
Key differentiators:
- Deterministic audits — same repository state produces same findings via event replay
- Hallucination prevention — schema-validated outputs with evidence requirements
- Complete audit trail —
.roadmap/activity.jsonlrecords every check execution - Governed agents — PARCER contracts enforce decision hygiene and token budgets
- Verifiable reports — SHA-256 hash verification from events to final output
Installation
# Clone the repository
git clone https://github.com/elzobrito/ESAA-Security.git
cd ESAA-Security
# Install Python dependencies
pip install -r requirements.txt
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageDetails
- Repository
- github.com/aradotso/security-skills
- Category
- Security
- First seen
- Jul 14, 2026
More from aradotso/security-skills
All 58- Foundry Security Spec586
- Anthropic Cybersecurity Skills1.3K
- Pentest Ai Agents1.1K
- Pentest Agents Bug Bounty Framework1K
- Openosint Ai Osint Framework992
- Vibe Security Skill976
- Openclaw Security Hardening971
- Malware Detection Awareness960
- Slowmist Agent Security Framework955
- Autopentestx Automated Pentesting950
- Avast Premium Security Analysis947
- Malware Warning Avast Keygen945
- Palisade Security Nexus Bitdefender937
- Malware Warning Avast Piracy934
- Avast Security Awareness933
- Report Malicious Repository927
- Unisecurityguard Academic Whistleblower Archive925
- Wxmini Security Audit919
- Avast Premium Security Detection918
- Security Awareness Malicious Repository Detection909
- Avast Premium Security Malware Analysis905
- Avast Premium Security Awareness898
- Avast Security Analysis897
- Openclaw Security Watchdog856
Recommended
More Security
data-encryptionaj-geddes/useful-ai-promptsImplement strong encryption using AES, RSA, TLS, and proper key management. Use when securing data at rest, in transit, or implementing end-to-end encryption.616skills.sh installs
security-passwordseyadkelleh/awesome-skills-securityTop password lists for authorized security testing: common passwords, darkweb leaks, worst passwords. Curated essentials (<10MB).591skills.sh installs
supabase-audit-auth-configyoanbernabeu/supabase-pentest-skillsAnalyze Supabase authentication configuration for security weaknesses and misconfigurations.576skills.sh installs
bluehammer-vulnerability-pocaradotso/trending-skillsbluehammer vulnerability poc527skills.sh installssecurity-documentationaj-geddes/useful-ai-promptsCreate security policies, guidelines, compliance documentation, and security best practices. Use when documenting security policies, compliance requirements, or455skills.sh installs