Identify deployment-blocking security vulnerabilities in application code and agent workflows.
npx skills add https://github.com/brianonieal/Syntaris --skill security-brianonieal
Please help me install this Agent Skill. Skill: security Source: https://github.com/brianonieal/Syntaris/tree/main/.claude/skills/security Command: npx skills add https://github.com/brianonieal/Syntaris --skill security-brianonieal
This Skill helps teams catch security issues before they reach production by providing a structured audit checklist at gate close and pre-deploy.
Use the security skill to review the current codebase for deployment-blocking vulnerabilities and report the highest-risk findings first.
High-intent search queries and answers about installing and using this skill.
A pre-deploy security audit identifies deployment-blocking vulnerabilities by reviewing access control, cryptography, injection, and configuration issues. It applies OWASP Top 10 coverage to validate feature branches and confirm production readiness before release.
Scanning application code for OWASP Top 10 vulnerabilities involves applying a structured audit checklist that verifies access controls, cryptographic implementations, and injection flaws. This structured approach spots unsafe patterns and standardizes recurring security reviews.
Preventing prompt injection in AI-assisted workflows requires implementing AI-specific guardrails that verify access control and logging mechanisms. A dedicated security audit checks these agent workflows for cost, logging, and prompt-injection resistance before deployment.
Yes, you can perform lightweight gate-close checks during routine handoffs to spot secrets, unsafe SQL patterns, and obvious regression risks. These quick checks integrate seamlessly into development environments to catch issues without delaying the pipeline.
Yes, the security audit covers access control verification and cryptographic checks as core components. It requires comprehensive OWASP Top 10 coverage, ensuring authentication and authorization mechanisms are validated before any code reaches production.
codgicianAudit code changes for secret exposure and infrastructure misconfigurations.
jeremy-newhouseEnforce deploy readiness gates for dev-to-main promotion with a DEPLOY-REVIEW.md verdict.
ollieb89Configures SAST tools like Semgrep, SonarQube and CodeQL for automated vulnerability detection in CI/CD pipelines.
glinckerScan source code for vulnerabilities, hardcoded secrets, and OWASP Top 10 issues.
