Review changed code for exploitable security vulnerabilities with CVSS v4.0 scoring.
npx skills add https://github.com/Fei2-Labs/skill-genie --skill aegis-protocol
Please help me install this Agent Skill. Skill: aegis-protocol Source: https://github.com/Fei2-Labs/skill-genie/tree/main/skills/aegis-protocol Command: npx skills add https://github.com/Fei2-Labs/skill-genie --skill aegis-protocol
This Skill provides a high-confidence code security review workflow for changed code, ensuring security-sensitive areas are protected before merging PRs.
Run Aegis Protocol on the current branch vs origin/HEAD to perform a security review.
High-intent search queries and answers about installing and using this skill.
To perform a threat-informed code review on recent git diffs, you need a Git and Python environment to analyze changed code against frameworks like MITRE ATT&CK and OWASP, filtering out false positives to ensure only exploitable findings are reported.
Yes, you can use CVSS v4.0 scoring to prioritize security vulnerabilities before merging a PR by running a structured security audit on your current branch versus origin/HEAD to assign severity scores to exploitable findings.
Yes, this code security review verifies software supply-chain dependencies by applying SLSA supply-chain verification alongside OWASP and NIST CSF methodologies to ensure security-sensitive areas are protected before merging.
The best way to reduce false positives in automated code security reviews is to focus threat-informed analysis strictly on changed code, prioritizing exploitability so that only high-confidence, genuinely exploitable findings are reported.
Yes, you need Python and Git installed to run SLSA supply-chain verification on code changes, as the review process relies on a Python environment with necessary libraries to analyze git diffs and score vulnerabilities.
Your code security review only scans the changed code instead of the whole repository to prioritize exploitability and perform high-confidence threat-informed analysis, ensuring security-sensitive areas are efficiently protected before a PR merge.
clover-stormDetect code changes from git diffs and update corresponding documentation sections.
AgentSecOpsScan container images, dependencies, and IaC files for vulnerabilities and misconfigurations.
AutomatedMarketerScan application code, configuration, and dependencies for security vulnerabilities.
zangxin75Conduct security audits and code vulnerability reviews with SAST scans.
