rune-ext-security

Run the owasp-audit workflow, which threat-models entry points, manually reviews auth, session, and crypto code, checks CI/CD pipeline yaml for injection risks, and reports exploitability-rated findings with file:line references and remediation steps.

The audit inspects every object-level endpoint to verify queries filter by both resource ID and the authenticated user's ID. It flags endpoints that fetch resources by ID alone, including bulk list endpoints that skip per-user scoping.

Automated gates like sentinel catch known CVEs, hardcoded secrets, and obvious injection patterns on every commit. This Skill performs deep on-demand analysis that catches logic flaws in auth flows, supply chain confusion attacks, and compliance gaps that automated tools miss.

Yes, the compliance workflow identifies applicable standards, maps requirements to actual code, automates evidence collection such as access log exports, and produces a gap report with severity, remediation effort estimates, and a prioritized roadmap.

The workflow requires confirming the target environment before executing any proof-of-concept and recommends adding environment guards to scripts. PoCs are minimal and defensive-only, scoped strictly to confirm exploitability of a specific finding.

The pentest workflow inspects JWT creation and validation code for algorithm confusion (alg:none), RS256-to-HS256 key confusion, missing token replay protection via jti blacklisting, and unverified audience and issuer claims.