Identify and mitigate security flaws in pre-merge code reviews.
npx skills add https://github.com/cropsgg/skills --skill security-audit-cropsgg
Please help me install this Agent Skill. Skill: security-audit Source: https://github.com/cropsgg/skills/tree/main/skills/engineering/security-audit Command: npx skills add https://github.com/cropsgg/skills --skill security-audit-cropsgg
This skill helps security-minded teams review code changes to identify weak trust boundaries, insecure defaults, and gaps in authentication and authorization before merging, reducing risk in production deployments.
Review a code change and generate a remediation plan addressing trust boundaries, authentication, and insecure defaults.
High-intent search queries and answers about installing and using this skill.
Pre-merge security audit of trust boundaries requires explicit trust modeling across components and data flows to identify insecure defaults and access control gaps before merging. You inventory sensitive surfaces and validate authentication changes to reduce production deployment risk.
Threat modeling during code review defines and validates trust models across components and data flows to identify weak trust boundaries before deployment. You need it when reviewing authentication, authorization, session handling, secrets, and input handling changes.
Reviewing authorization and session handling changes requires inventorying sensitive surfaces and access controls to identify insecure defaults and gaps. You propose mitigations with documented verification steps and reproducible evidence to ensure secure third-party integrations.
Security audit applies to pre-merge reviews of code, config, and third-party integrations to identify access control gaps and insecure defaults. It validates trust models across data flows and generates remediation plans addressing authentication and authorization risks.
Documenting mitigations for insecure defaults requires proposing verification steps with reproducible evidence during the security audit. You inventory sensitive surfaces, validate trust models, and generate a remediation plan addressing weak trust boundaries and authentication gaps.
rampstackcoEstablish a security baseline for websites and web apps.
FlorianBruniauxDetect fail-open insecure defaults in code and configuration flows.
martinholovskyManage and audit software secret lifecycles with automated leak detection.
Mekann2904Analyze SAST tool outputs to classify code vulnerabilities and suggest remediation patterns.
