warden-skills

Run `npx skills add getsentry/warden-skills --all -g -y` in your terminal to install all security review skills globally.

It finds authorization flaws like IDOR and privilege escalation, code execution sinks like command injection and unsafe deserialization, data exfiltration paths like SSRF and SQL injection, PII leaks, GitHub Actions exploits, and denial-of-service bugs.

Yes. It includes dedicated reference guides for Django, FastAPI, Flask, Express, NestJS, Next.js, tRPC, and GraphQL, with examples in both Python and TypeScript.

Each skill requires the agent to trace data flow from attacker-controlled input to the dangerous sink and verify mitigations before reporting, with explicit lists of safe patterns to ignore.

Yes. Each finding includes the file and line, severity, the exploit path, and a concrete fix, so any developer can act on the results.