Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add pinkpixel-dev/skills-collection-1 --skill 007git clone --depth 1 https://github.com/pinkpixel-dev/skills-collection-1Wrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/pinkpixel-dev/skills-collection-1/007)<a href="https://agentmods.dev/skills/pinkpixel-dev/skills-collection-1/007"><img src="https://agentmods.dev/badge/skills/pinkpixel-dev/skills-collection-1/007.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00039 | $0.06167 |
| Opus 5 | $0.00019 | $0.03083 |
| Sonnet 5 | $0.00008 | $0.01233 |
| Haiku 4.5 | $0.00004 | $0.00617 |
Grade A, and why
007 scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 7d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Runs shell commandslowCapability
Expected in a hook, worth knowing in a rule or an instructions file.
- Onde ha execucao de codigo (eval, exec, subprocess, child_process) This is a copy
94% identical to 007 — 9 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.
How it starts
The opening of the file, as written. The whole thing — 651 lines — stays where its author put it; the contents beside it link to each section on GitHub.
007 — Licenca para Auditar
Overview
Security audit, hardening, threat modeling (STRIDE/PASTA), Red/Blue Team, OWASP checks, code review, incident response, and infrastructure security for any project.
When to Use This Skill
- When the user mentions "audite" or related topics
- When the user mentions "auditoria" or related topics
- When the user mentions "seguranca" or related topics
- When the user mentions "security audit" or related topics
- When the user mentions "threat model" or related topics
- When the user mentions "STRIDE" or related topics
Do Not Use This Skill When
- The task is unrelated to 007
- A simpler, more specific tool can handle the request
- The user needs general-purpose assistance without domain expertise
How It Works
O 007 opera como um Chief Security Architect AI com expertise em:
| Dominio | Especialidades |
|---|---|
| Codigo | Python, Node/JS, supply chain, SAST, dependencias |
| Infra | Linux/Ubuntu, Windows, SSH, firewall, containers, VPS, cloud |
| APIs | REST, GraphQL, OAuth, JWT, webhooks, CORS, rate limit |
| Bots/Social | WhatsApp, Instagram, Telegram (anti-ban, rate limit, policies) |
| Pagamentos | PCI-DSS mindset, antifraude, idempotencia, webhooks financeiros |
| IA/Agentes | Prompt injection, jailbreak, isolamento, explosao de custo, LLM security |
| Compliance | OWASP Top 10 (Web/API/LLM), LGPD/GDPR, SOC2, Zero Trust |
| Operacoes | Observabilidade, logging, resposta a incidentes, playbooks |
007 — Licenca Para Auditar
Agente Supremo de Seguranca, Auditoria e Hardening. Pensa como atacante, age como arquiteto de defesa. Nada entra em producao sem passar pelo 007.
Modos Operacionais
O 007 opera em 6 modos. O usuario pode invocar diretamente ou o 007 seleciona automaticamente baseado no contexto:
Modo 1: Audit (Padrao)
Trigger: "audite este codigo", "revise a seguranca", "tem algum risco?" Executa analise completa de seguranca com o processo de 6 fases.
What ships with it
14 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- references/ai-agent-security.md 15 KB
- references/api-security-patterns.md 13 KB
- references/incident-playbooks.md 15 KB
- references/owasp-checklists.md 13 KB
- references/stride-pasta-guide.md 12 KB
- scripts/config.py 17 KB runs code
- scripts/full_audit.py 48 KB runs code
- scripts/quick_scan.py 15 KB runs code
- scripts/requirements.txt 1.1 KB
- scripts/scanners/__init__.py 0 B runs code
- scripts/scanners/dependency_scanner.py 44 KB runs code
- scripts/scanners/injection_scanner.py 37 KB runs code
- scripts/scanners/secrets_scanner.py 31 KB runs code
- scripts/score_calculator.py 26 KB runs code
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 7d ago First seen · 651 lines · 39 tokens per session scan A b933e9212cdd
007 is a skill published in the GitHub repository pinkpixel-dev/skills-collection-1 (7 stars, last pushed 28d ago), licensed Apache-2.0. It adds 39 tokens to every session and 6,167 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 1 finding (runs shell commands). It is 94% identical to 007, differing in 9 lines, and is treated as a copy.
Other skills, from other repositories
007
Security audit, hardening, threat modeling (STRIDE/PASTA), Red/Blue Team, OWASP checks, code review, incident response, and infrastructure security for any project.
007
Security audit, hardening, threat modeling (STRIDE/PASTA), Red/Blue Team, OWASP checks, code review, incident response, and infrastructure security for any project.
007
Security audit, hardening, threat modeling (STRIDE/PASTA), Red/Blue Team, OWASP checks, code review, incident response, and infrastructure security for any project.
007
Security audit, hardening, threat modeling (STRIDE/PASTA), Red/Blue Team, OWASP checks, code review, incident response, and infrastructure security for any project.
007
Security audit, hardening, threat modeling (STRIDE/PASTA), Red/Blue Team, OWASP checks, code review, incident response, and infrastructure security for any project.
007
Security audit, hardening, threat modeling (STRIDE/PASTA), Red/Blue Team, OWASP checks, code review, incident response, and infrastructure security for any project.