1.15.0 — SOC Analyst: Stack-Agnostic Refactor
SOC Analyst — Now Stack-Agnostic
The soc-analyst skill is no longer Laravel/PHP-only. It now auto-detects the project stack and applies the appropriate security patterns, fixes, and hardening checks.
Supported Stacks
| Stack | Detection | Dependency Audit |
|---|---|---|
| Laravel/PHP | composer.json + artisan |
composer audit |
| Node.js/Express | package.json |
npm audit / yarn audit |
| Python/Django/Flask | requirements.txt / pyproject.toml |
pip audit / safety check |
| Ruby/Rails | Gemfile |
bundle audit |
| Go | go.mod |
govulncheck ./... |
| Java/Spring | pom.xml / build.gradle |
mvn dependency-check:check |
| Rust | Cargo.toml |
cargo audit |
| .NET | *.csproj / *.sln |
dotnet list package --vulnerable |
What Changed
- SKILL.md — Stack detection pre-flight, agnostic command workflows, test framework selection table
- vulnerability-patterns.md — Grep patterns and vulnerable code examples for 6 stacks × 14 vulnerability classes
- remediation-playbooks.md — Before/after fixes with regression tests for Laravel, Express, Django/Flask, and Rails
- hardening-checklist.md — 65 checks with collapsible stack-specific verification/fix notes for 4 stacks
- mitre-attack-mapping.md — Stack-specific exposure points, shell patterns, and credential locations
- incident-report-templates.md — Generic code blocks, stack field in templates
Install
curl -fsSL https://raw.githubusercontent.com/nasrulhazim/agent-skills/main/install.sh | bash