What problem does it solve? Legacy codebases often contain hardcoded secrets, SQL injection vulnerabilities, missing authentication, and outdated auth flows, but fixing them with big-bang rewrites breaks production. This Skill provides a phased, triage-driven migration path that hardens existing .NET / React / Blazor / Azure codebases one safe PR at a time. ## Core Features & Use Cases - Phase 0 Assessment Protocol: Runs gitleaks, dependency scans, auth surface mapping, BOLA checks, and SQL injection audits, then produces a prioritized P0-P3 findings report before any code changes. - Security-Critical Migrations: Replaces hardcoded secrets with Key Vault and Managed Identity, migrates JWT validation to Microsoft.Identity.Web, moves tokens from localStorage to sessionStorage, and upgrades Implicit Grant to Authorization Code + PKCE. - Architecture & DevSecOps Modernization: Extracts business logic from controllers into services and repositories, adds characterization and security tests, and installs progressive CI/CD security gates (Gitleaks, Semgrep, Snyk, Trivy, Checkov). - Use Case: You inherit a .NET API with connection strings in appsettings.json, controllers without [Authorize], and string-interpolated SQL queries. The Skill triages the secrets as P0, parameterizes the queries as P1, and sequences each fix as a separate passing PR. ## Quick Start Use the codebase-modernization skill to assess this repository for security issues and produce a prioritized migration plan.
