blueteam-defend

Trace data flow from untrusted inputs to dangerous sinks and fix vulnerabilities.

1|1|Updated Mar 5, 2026
One-click install
npx skills add https://github.com/abhijeetkakade1234/skills --skill blueteam-defend
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: blueteam-defend
Source: https://github.com/abhijeetkakade1234/skills/tree/main/blueteam-defend
Command: npx skills add https://github.com/abhijeetkakade1234/skills --skill blueteam-defend

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill addresses the critical gap between conceptual security advice and practical, hands-on remediation by systematically identifying and fixing real-world vulnerabilities in your source code.

Core Features & Use Cases

  • Vulnerability Hunting: Scans codebases for OWASP Top 10 and API Top 10 risks, including BOLA, mass assignment, SSRF, and insecure deserialization.
  • Evidence-Based Reporting: Provides exact file and line references for every finding, ensuring you know exactly where the risk exists.
  • Verified Remediation: Proposes idiomatic, minimal code fixes and verifies them against your project's requirements before applying changes.

Quick Start

Use the blueteam-defend skill to perform a comprehensive security audit of the current repository and propose fixes for any identified vulnerabilities.

Frequently Asked Questions about blueteam-defend

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit my codebase for OWASP Top 10 vulnerabilities?

This skill audits source code for OWASP vulnerabilities by tracing data flow from untrusted inputs to dangerous sinks. It detects risks like BOLA, mass assignment, and SSRF, providing exact file and line references for every finding.

Can I automatically fix security flaws found during a source code audit?

You can fix detected security flaws using this skill's verified remediation feature. It proposes idiomatic, minimal code fixes for identified vulnerabilities and verifies them against project requirements before applying changes to your source code.

Does this vulnerability scanner work across diverse tech stacks?

Yes, this vulnerability detection operates on diverse tech stacks to identify flaws like insecure deserialization and broken access control. It systematically traces data flow across different application architectures to locate and remediate security risks.

What is the best way to detect broken access control and injection flaws in application source code?

The best way to detect broken access control and injection flaws is by tracing data flow from untrusted inputs to dangerous sinks. This skill enforces a fail-closed security doctrine to systematically identify risks and provide concrete code-level fixes.

How does data flow tracing find insecure deserialization and SSRF risks?

Data flow tracing finds insecure deserialization and SSRF risks by tracking untrusted inputs as they propagate to dangerous sinks. This mechanism systematically identifies where malicious payloads can exploit application code paths to trigger unauthorized actions.