securability-engineering-review

Assesses code securability via OWASP FIASSE/SSEM framework and generates weighted pillar report.

141|14|Updated Mar 22, 2026
One-click install
npx skills add https://github.com/OWASP/secure-agent-playbook --skill securability-engineering-review-owasp
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: securability-engineering-review
Source: https://github.com/OWASP/secure-agent-playbook/tree/main/skills/securability-engineering-review
Command: npx skills add https://github.com/OWASP/secure-agent-playbook --skill securability-engineering-review-owasp

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps software teams evaluate the securability of code by applying the OWASP FIASSE/SSEM framework, enabling teams to assess long-term security posture and readiness for fixes and refactors.

Core Features & Use Cases

  • Systematic SSEM scoring across analyzability, modifiability, testability, confidentiality, accountability, authenticity, availability, integrity, and resilience, with weighted pillar results and a clear rubric.
  • Integrates securability checks into code-review workflows and MR processes to ensure code remains securable over time.
  • Provides a practical 45-item evaluation checklist and accompanying guidance to drive repeatable security decisions during development and governance.

Quick Start

Run the securability review using the OWASP FIASSE/SSEM framework on your codebase to generate a structured securability report.

Frequently Asked Questions about securability-engineering-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I evaluate code securability during a code review?

Code securability evaluation applies the OWASP FIASSE/SSEM framework to assess security posture across analyzability, modifiability, testability, and resilience, generating a weighted pillar score and a 45-item checklist for remediation guidance.

What is the OWASP SSEM framework for software engineering?

The OWASP SSEM framework is a systematic method to evaluate long-term code securability, measuring attributes like confidentiality, accountability, authenticity, availability, and integrity to ensure code remains securable over time through an 8-step procedure.

How do I integrate securability checks into MR processes?

Securability checks integrate into MR workflows by applying the SSEM 8-step procedure during code reviews to produce a structured securability report, pillar breakdown, and evaluation checklist that drive repeatable security governance decisions.

Can I use the FIASSE framework to assess code readiness for refactoring?

The FIASSE framework assesses code readiness for refactors by scoring analyzability, modifiability, and testability pillars, providing a weighted rubric that helps teams evaluate long-term security posture and readiness for fixes.

What securability attributes does the SSEM 8-step procedure evaluate?

The SSEM 8-step procedure evaluates nine securability attributes: analyzability, modifiability, testability, confidentiality, accountability, authenticity, availability, integrity, and resilience, producing a weighted pillar score and remediation guidance.

Does the OWASP SSEM framework require external dependencies to run?

The OWASP SSEM framework requires no external dependencies to run, functioning as a standalone evaluation tool that generates an SSEM score summary, pillar breakdown, and 45-item evaluation checklist directly from code analysis.