commit-security-scan

What problem does it solve?

This Skill analyzes code changes (PRs, commits, or diffs) for security vulnerabilities using large language model reasoning and a formal threat model approach, enabling safer code reviews and pre-merge checks.

Core Features & Use Cases

• LLM-driven threat analysis: Detects vulnerabilities across changed files using a repository threat model and severity thresholds.
• PR, pre-commit, and branch coverage: Suitable for PR reviews, pre-commit checks, and branch comparisons to enforce secure development.
• Prerequisite-driven workflow: Reads and validates the threat model at .factory/threat-model.md and the security config at .factory/security-config.json, auto-generating them if needed.

Quick Start

Run the security scan on the current workspace against changed files; ensure prerequisites exist or are auto-generated, and review the structured findings.