agent-security

Assess attack surfaces, data sensitivity, and trust boundaries in feature changes.

4|Updated Mar 31, 2026
One-click install
npx skills add https://github.com/ryan-nguyen-01/agent-platform --skill agent-security-ryan-nguyen-01
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: agent-security
Source: https://github.com/ryan-nguyen-01/agent-platform/tree/main/.claude/Agents/agent-security
Command: npx skills add https://github.com/ryan-nguyen-01/agent-platform --skill agent-security-ryan-nguyen-01

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Security engineers need to identify and remediate vulnerabilities and misconfigurations in new features before release, ensuring compliance and reducing risk.

Core Features & Use Cases

  • Threat assessment and security review checklist for feature changes
  • Dependency audit and secrets scanning
  • Security reporting with actionable remediations and guidance

Quick Start

Provide the feature change diff and description to trigger a security review and generate a structured report.

Frequently Asked Questions about agent-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I do a security review on new code changes before release?

Conduct a security review by providing the feature change diff and description to trigger an automated assessment. The system evaluates attack surfaces, trust boundaries, and data sensitivity, generating a structured report with concrete remediation steps.

What is threat modeling for REST and GraphQL endpoints?

Threat modeling for REST and GraphQL endpoints involves assessing attack surfaces and data flows across authentication boundaries. This process identifies vulnerabilities in API structures, ensuring compliance and reducing risk before deployment.

How to scan code dependencies for vulnerabilities and exposed secrets?

Scan dependencies and secrets by applying the security review to configuration and deployment pipelines. The process performs dependency audits and secrets scanning, identifying hidden risks and providing actionable remediation guidance.

Does this security review check OWASP Top 10 categories?

Yes, the security review explicitly satisfies OWASP Top 10 categories. It assesses code changes, configuration, and data flows to identify vulnerabilities, ensuring the feature change meets compliance standards.

Can I use this for threat assessment on configuration and deployment pipelines?

Yes, you can apply this threat assessment to configuration and deployment pipelines. The review evaluates attack surfaces and data sensitivity across these pipelines, generating a risk-focused report with remediation steps.

What is the best way to identify security gaps in a feature change?

The best way to identify security gaps is to assess attack surfaces, data sensitivity, and trust boundaries within the feature change. This generates a risk-focused report highlighting vulnerabilities and concrete remediation steps.