skills.rest
tower
towerOFFICIAL
Explore all skills by this author →
WebsiteGitHub

plan-security-review

Audit credential hygiene and data sensitivity in Tower data apps.

19|Updated Apr 1, 2026
Search Tags:#security#audit#compliance#data-access#incident-response#credential-hygiene#tower-secrets
One-click install
npx skills add https://github.com/tower/agentic-data-engineering --skill plan-security-review
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: plan-security-review
Source: https://github.com/tower/agentic-data-engineering/tree/main/.claude/skills/plan-security-review
Command: npx skills add https://github.com/tower/agentic-data-engineering --skill plan-security-review

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Security review of Tower data apps to verify credential hygiene, data sensitivity handling, and access control before deployment or after credential incidents.

Core Features & Use Cases

  • Enforces 5 PF/fail checks plus 2 scored dimensions (PII awareness, secret rotation readiness) to systematically assess apps.
  • Supports both AUDIT (pre-deploy) and INCIDENT (credential compromise) modes to match real-world security workflows.
  • Produces a structured artifact for auditing, with guidance on remediation and next steps.

Quick Start

Provide the app name and mode (AUDIT or INCIDENT) to start the security review.

Frequently Asked Questions about plan-security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit credential hygiene and data sensitivity in dbt and dlt apps?▼

Auditing credential hygiene in dbt and dlt apps involves running pass/fail checks for secrets and scoring PII awareness across Python, dbt, dlt, and ASGI applications to produce a structured remediation artifact.

What is the best way to review access control and compliance before deploying data apps?▼

Reviewing access control before deployment is best achieved using AUDIT mode to enforce pass/fail checks and scored dimensions, verifying data sensitivity handling and credential hygiene.

Can I run a security review after a credential compromise incident?▼

Yes, running a security review after a credential compromise uses INCIDENT mode to surface pass/fail checks and secret rotation readiness, guiding remediation for affected Python and ASGI applications.

Does the security review work with Python and ASGI applications?▼

Yes, the security review works with Python and ASGI applications, checking credential hygiene and data sensitivity alongside dbt and dlt frameworks to ensure comprehensive compliance and access control.

What checks are performed during a Tower data app security audit?▼

A Tower data app security audit performs 5 pass/fail checks (PF-1 to PF-5) and evaluates 2 scored dimensions measuring PII awareness and secret rotation readiness to identify compliance gaps.

Related Skills

Explore More Software Engineering Skills→
towertower
19

plan-data-engineer-review

Identify reliability gaps and production-readiness issues in Tower data apps.

Official
Advanced
williamzujkowskiwilliamzujkowski
18

security-scanning

Automate review and fixing of CodeQL and secret scanning alerts.

Community
Advanced
towertower
19

debug-pipeline

Debug and inspect Tower app runs using local logs and status.

Official
Advanced
highflame-aihighflame-ai
4

rotate-secrets

Rotate expiring credentials from a secret inventory with overlap verification.

Official
Advanced