Audit codebases and diffs for security flaws and compliance risks.
npx skills add https://github.com/JayRHa/AgentSkills --skill secure-code-review-jayrha
Please help me install this Agent Skill. Skill: secure-code-review Source: https://github.com/JayRHa/AgentSkills/tree/main/secure-code-review Command: npx skills add https://github.com/JayRHa/AgentSkills --skill secure-code-review-jayrha
Review code through the eyes of an attacker to identify and prioritize security vulnerabilities, reducing risk before deployment.
Analyze the provided codebase or diff for security issues and generate prioritized findings.
High-intent search queries and answers about installing and using this skill.
Threat modeling secures code by mapping trust boundaries and analyzing taint data flows to dangerous sinks. It identifies potential compliance risks and security flaws before deployment by reviewing the codebase through an attacker's perspective.
Static analysis for threat modeling applies across different programming languages and build systems. It supports diverse codebases by generating structured reports and actionable mitigations based on standardized security checklists.
The best way to rate security findings by impact and exploitability is using a standardized rubric. This approach evaluates discovered vulnerabilities and compliance risks to produce actionable fixes and structured mitigation reports.
Mapping trust boundaries and taint data flows during a security review involves tracing untrusted input to dangerous execution sinks. This exposes potential security vulnerabilities, enabling structured reporting and prioritized remediation.
Secure code review aligns with OWASP risk assessment methodologies by mapping threats and tracking taint flows to dangerous sinks. It rates identified vulnerabilities by impact and exploitability to generate actionable fixes for pull requests.
vKenjoEnumerate trust boundaries, assets, and attack paths in a codebase.
wgpsecGenerate structured penetration testing reports with CVSS risk ratings and remediation guidance.
roderikIdentify security vulnerabilities in source code using CodeQL static analysis.
huangwb8Identify and mitigate security risks through threat modeling and compliance checks.
