Audit code, configuration, and infrastructure changes against OWASP security best practices.
npx skills add https://github.com/alo-exp/silver-bullet --skill gsd-secure
Please help me install this Agent Skill. Skill: gsd-secure Source: https://github.com/alo-exp/silver-bullet/tree/main/skills/gsd-secure Command: npx skills add https://github.com/alo-exp/silver-bullet --skill gsd-secure
Security audits of code changes, enforcing defense in depth and OWASP best practices to prevent insecure deployments.
Run a security review on the latest changes and generate a PASS-ready SECURITY.md.
High-intent search queries and answers about installing and using this skill.
Automate an OWASP security audit by running structured checklists against code diffs to enforce defense-in-depth. The review identifies security touchpoints like authentication, data persistence, and external API calls, tracking critical findings before shipping.
A SECURITY.md PASS gate is a formal security artifact verifying that critical findings from a code review are remediated before deployment. It tracks defense-in-depth checklist results, enabling developers and release engineers to block insecure shipments.
Identify security touchpoints by analyzing REVIEW.md or file diffs to locate authentication, user input handling, file I/O, and external API calls. A structured security checklist then validates input validation, parameterized queries, and secret management across these areas.
Yes, a defense-in-depth security review covers infrastructure and configuration changes alongside code modifications. It applies OWASP best practices across all pre-release changes to prevent insecure deployments and ensure comprehensive audit coverage.
Yes, a formal security checklist is required to execute OWASP best practices and enforce defense-in-depth during code review. It structures the validation of output encoding, auth/authz, and parameterized queries, guiding the remediation of critical findings.
Block a deployment based on critical security findings when a pre-release security audit identifies unresolved vulnerabilities in code, configurations, or infrastructure. The SECURITY.md PASS gate remains failed until defense-in-depth remediation is complete.
sswapnil2Analyze fintech code diffs for security gaps using OWASP Top 10 and PCI-DSS checklists.
alo-expIdentify security-touching changes and verify them against an OWASP-aligned checklist.
novvooAutomate Django verification with environment, code, migration, test, security, and configuration checks.
frogguguguguExecute SCA, SAST, DAST, and secret detection scans to report vulnerabilities.
