deep-appsec-review

What problem does it solve?

This Skill solves the challenge of identifying complex and reachable security vulnerabilities with a high level of accuracy, minimizing false positives, and ensuring that findings drive shipping, compliance, or disclosure decisions.

Core Features & Use Cases

• Deep Security Analysis: Comprehensive review of codebases for vulnerabilities like authorization issues, authentication breaches, data exposure, and more.
• Subagent Validation: Utilizes two subagents for thorough validation of findings, ensuring reliability and accuracy.
• High Evidence Bar: Finds complex vulnerabilities with a concrete entry point, attacker position, trust boundary, and evidence for a minimum fix and regression test.
• Use Case: When developing critical systems, use this Skill to ensure that the codebase is secure and that vulnerabilities are identified and addressed before deployment.

Quick Start

Run a deep-appsec-review on the 'main' branch to uncover complex security issues in the codebase.