Review DISHA code changes for mandatory security controls.
npx skills add https://github.com/Tashima-Tarsh/Disha --skill cyber-security-tashima-tarsh
Please help me install this Agent Skill. Skill: cyber-security Source: https://github.com/Tashima-Tarsh/Disha/tree/main/.codex/skills/cyber-security Command: npx skills add https://github.com/Tashima-Tarsh/Disha --skill cyber-security-tashima-tarsh
Security-sensitive DISHA code carries high risk of vulnerabilities, and manual reviews often miss critical controls like authentication, input validation, and audit logging, leading to preventable security incidents and data breaches.
Use the cyber-security skill to review the new user data API endpoint code for compliance with all security checklist requirements before merging.
High-intent search queries and answers about installing and using this skill.
Prevent security vulnerabilities during code review by enforcing mandatory controls like endpoint authentication, RBAC authorization, input validation and bounding, injection protection, encrypted credential storage, and audit event emission for sensitive operations.
Mandatory DISHA security controls include endpoint authentication, RBAC authorization, input validation and bounding, injection and traversal protection, encrypted credential storage, and audit event emission for sensitive operations.
Check API endpoints for SQL injection and privilege escalation by enforcing input validation and bounding, RBAC authorization, and injection and traversal protection during code modification and review workflows.
Yes, the cyber-security skill applies to all code changes involving credential management and audit logging, enforcing encrypted credential storage and mandatory audit event emission for sensitive operations.
Manual code review misses critical security controls like authentication and input validation due to oversight, leading to preventable security incidents and data breaches without automated checklist enforcement.
DanielPodolskyReview code changes for security vulnerabilities before merge or deployment.
yspreenAudit Convex apps for authorization, data access, and sensitive operations.
gajjalaashok75-UIIdentify security vulnerabilities in application code and implementation plans.
jeffabaileyAnalyze code for security vulnerabilities and compliance risks with fitness scores.
