Analyze code changes for OWASP Top 10 vulnerabilities and prompt injection patterns.
npx skills add https://github.com/dev-gios/agent-teams-qa --skill qa-security
Please help me install this Agent Skill. Skill: qa-security Source: https://github.com/dev-gios/agent-teams-qa/tree/main/skills/qa-security Command: npx skills add https://github.com/dev-gios/agent-teams-qa --skill qa-security
This Skill acts as a vigilant guardian, scanning code changes for security vulnerabilities, prompt injection risks, and data exposure, ensuring the integrity and safety of the codebase.
Use the qa-security skill to analyze the staged code changes for any security vulnerabilities.
High-intent search queries and answers about installing and using this skill.
This Skill scans code changes for OWASP Top 10 vulnerabilities by validating authentication, authorization, and data exposure. It detects prompt injection patterns and malicious instructions in comments and strings, providing comprehensive security analysis.
Yes, this Skill detects prompt injection patterns by scanning comments and strings for malicious instructions targeting AI models. It identifies embedded payloads and flags them during the code review process.
Automating security reviews for sensitive data exposure involves scanning code for PII in logs, credential leakage, and insecure data handling. This Skill flags these instances during analysis to prevent sensitive information from being exposed.
Yes, this tool has veto power to halt the review process with a BLOCKER finding when it detects critical security flaws. It prevents merging of code changes that contain severe vulnerabilities or dangerous prompt injection risks.
To validate authentication and authorization mechanisms, this Skill analyzes code changes for broken access control and weak authentication. It detects potential injection vectors and flags them before the feature is merged.
This vulnerability scanner flags malicious patterns in strings that indicate prompt injection risks, data exposure, or payloads targeting AI models. It detects insecure credential handling and malicious instructions hidden in standard code text.
naj2rCreates git commits with auto-generated messages and optional push.
rcrathMonitor GitHub issues for regressions and report findings in audio format.
AreteDriverImplements CI/CD pipelines using Batcomputer for automated code review and deployment gating.
PriyanshKuniyalConfigures and manages SAST tools for automated vulnerability detection in CI/CD pipelines.
