bmild-sec

What problem does it solve?

This Skill eliminates the risk of missing exploitable security vulnerabilities in code and system architecture by providing a structured, expert review process that filters out theoretical noise and focuses only on high-confidence, actionable flaws that pose real breach risk.

Core Features & Use Cases

• Multi-Mode Review Workflows: Supports architecture security reviews for pre-implementation designs, PR security reviews for code diffs, slice security reviews for completed implementation, and handback reviews for resolving previously raised security findings.
• Stakes-Based Prioritization: Uses a configurable security category checklist to prioritize high-risk areas like input validation, authentication, and injection flaws, applying confidence thresholds to avoid flagging speculative issues.
• Actionable Remediation Guidance: Delivers concrete exploit scenarios, clear impact assessment, and routed remediation advice to the appropriate development or design persona, with optional roundtable facilitation for complex trade-offs.
• Use Case: A development team building a new payment processing feature can use this Skill to review the system design for trust boundary flaws before implementation, then review the pull request for injection or authentication bypass vulnerabilities, ensuring security issues are caught early in the development cycle.

Quick Start

Use the bmild-sec skill to perform a security review of the new payment processing feature's architecture draft.