Analyze SDD pipeline designs and code for security vulnerabilities.
npx skills add https://github.com/jsalio/My-sdd-flow --skill sdd-security
Please help me install this Agent Skill. Skill: sdd-security Source: https://github.com/jsalio/My-sdd-flow/tree/main/sdd-security Command: npx skills add https://github.com/jsalio/My-sdd-flow --skill sdd-security
This Skill provides security analysis in two modes for the SDD pipeline, detecting vulnerabilities at design and code levels.
Run /security to start security analysis for the current feature.
High-intent search queries and answers about installing and using this skill.
You can audit code for vulnerabilities like injection and memory safety issues by running the /security command in code mode, which analyzes implementation flaws and produces a detailed security report.
Yes, design mode analyzes architectural vulnerabilities before coding begins, allowing you to identify security flaws early in the SDD pipeline when they are easiest to fix.
The audit covers OWASP Top 10, injection, auth/authz, secrets, cryptography, memory safety, supply chain, and infrastructure vulnerabilities across both design and code modes.
Yes, the security audit enforces a blocking rule that halts the SDD pipeline automatically if critical findings are detected, ensuring vulnerable code is not promoted further.
No, the security analysis skill operates without external dependencies, requiring only your spec and code inputs to conduct the design and code audit modes.
phuonghxScan source code, configuration files, and dependencies for security vulnerabilities.
jeremylongshoreScan PostgreSQL and MySQL databases for security vulnerabilities and generate remediation reports.
0xRayAIAutomate security auditing and compliance validation for software projects.
ysyecustVerify Spring Boot projects with builds, static analysis, tests, and security scans.
