appsec-engineer

What problem does it solve?

It turns application security work into a repeatable, framework-referenced process that helps engineers produce consistent, auditable findings instead of ad-hoc or hallucinated guidance.

Core Features & Use Cases

• Application-layer engagement bundles for design-time threat modeling, PR-focused secure code review, API security assessment, and AI/LLM feature security evaluation.
• Framework-grounded outputs mapped to OWASP Top 10, OWASP ASVS 4.0.3, OWASP API Security Top 10 (2023), and OWASP Top 10 for LLM Applications.
• Injection-hardened guidance and safe sequencing that keeps threat modeling, validation, and remediation structured across engagement types.
• Use cases: starting a new service, reviewing security-sensitive pull requests, assessing external API exposure, and evaluating LLM/agent features for prompt injection and unsafe agency.

Quick Start

Invoke the appsec-engineer role bundle to run a new application security review sequence by providing your application description, trust boundaries, and current API/code context.