Generates a security-focused DISCOVERY.md for code review and threat modeling.
npx skills add https://github.com/igbuend/grimbard --skill codebase-discovery
Please help me install this Agent Skill. Skill: codebase-discovery Source: https://github.com/igbuend/grimbard/tree/main/skills/codebase-discovery Command: npx skills add https://github.com/igbuend/grimbard --skill codebase-discovery
This Skill automates the creation of a security-focused discovery document for any codebase, streamlining security assessments and threat modeling.
DISCOVERY.md file detailing the project's security posture.Use the codebase-discovery skill to generate a DISCOVERY.md for the current directory.
High-intent search queries and answers about installing and using this skill.
To map the security posture of an unfamiliar codebase, generate a security-focused DISCOVERY.md document that highlights critical files, dependencies, and trust boundaries. This provides a foundational structure for threat modeling and security audits.
A DISCOVERY.md file is used to automate and structure code review findings during security auditing. It documents authentication patterns, validation mechanisms, and trust boundaries to prepare auditors for penetration testing on unfamiliar projects.
Yes, you can use this approach to identify trust boundaries and authentication patterns in any project. It performs file discovery and analyzes validation patterns to generate comprehensive documentation using a predefined template.
To prepare for a security audit on an unseen codebase, generate a security-focused DISCOVERY.md file. This quickly identifies security-critical files and dependencies, streamlining the initial assessment and onboarding process for new auditors.
Automated security discovery does not replace manual code review but rather streamlines penetration testing preparation. It generates a foundational document highlighting key areas for review, allowing auditors to focus their manual efforts efficiently.
loriensleafsIdentifies security-critical changes in code and configuration for review.
nagisanzeninAudit application code for OWASP Top 10 vulnerabilities and generate remediation plans.
LuisSambranoPerform systematic code review and static analysis across multiple programming languages.
drgaciwConfigure Semgrep, SonarQube, and CodeQL for automated vulnerability detection.