Generate a traceable security checklist from task or slice plans.
npx skills add https://github.com/vh2224/forge-agent --skill forge-security-vh2224
Please help me install this Agent Skill. Skill: forge-security Source: https://github.com/vh2224/forge-agent/tree/main/skills/forge-security Command: npx skills add https://github.com/vh2224/forge-agent --skill forge-security-vh2224
This Skill provides a focused approach to derive security requirements directly from task or slice plans, ensuring that only in-scope areas are assessed and that each item is traceable to plan content.
Analyze the active plan and generate a tailored security checklist for the detected domains.
High-intent search queries and answers about installing and using this skill.
Generating a security checklist from a task plan involves identifying active security domains like API, data handling, and transport. It then produces a traceable checklist with concrete acceptance criteria and risk levels for each identified requirement.
Active-domain mapping for security requirements is the process of reading a task plan to determine which specific security domains apply. It ensures only explicitly mentioned areas are assessed, preventing over-automation and keeping the checklist focused.
Prioritize security verification tasks by classifying items into Blocker versus Check tiers. This classification helps focus verification work on critical risks first, ensuring traceability directly back to the slice plan content.
Yes, you can generate a security checklist for authentication flow planning. It applies to auth concerns by confirming token handling, request validation, and error safety based directly on the authentication flow plan content.
Automated security checklist generation does not work without explicit plan details. It activates only domains that the plan explicitly mentions, requiring every checklist item to be directly supported by plan content to ensure traceability.
SailfishcExecute approved GuanFu plan slices and log verification evidence.
zangxin75Review construction software security for financial, BIM/CAD, and field data.
OneWave-AIReview code for security vulnerabilities, performance bottlenecks, and maintainability issues.
cathayriskAnalyze macroeconomic reports with regime-aware data vintage and yield-curve flags.
