security

Identify security vulnerabilities and design weaknesses in codebases before deployment.

Updated Aug 27, 2026

Search Tags:#security #vulnerability #owasp #review #best-practices #threat-modeling

Ready to run

npx skills add https://github.com/curphey/bosun --skill security-curphey

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security
Source: https://github.com/curphey/bosun/tree/main/skills/security
Command: npx skills add https://github.com/curphey/bosun --skill security-curphey

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Security review discipline helps teams catch vulnerabilities, misconfigurations, and policy violations early in the software lifecycle, reducing risk and remediation costs.

Core Features & Use Cases

Threat-surface identification and risk classification for new changes
Guided vulnerability checks aligned with references/OWASP
Red-flag indicators and remediation guidance for faster decision-making
Reference-driven workflows for governance and compliance

Quick Start

Review a code change with the Security Review Skill to identify high-priority findings and generate a remediation plan.

Frequently Asked Questions about security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I identify security vulnerabilities in my codebase before deployment?▼

To identify security vulnerabilities before deployment, apply a repeatable review process using threat modeling, vulnerability scanning, dependency checks, and secure configuration reviews across APIs and services.

What is the best way to perform an OWASP-aligned security review on new code changes?▼

The best way to perform an OWASP-aligned security review is to use guided vulnerability checks that classify risk and flag red indicators, enforcing a core checklist that references OWASP Top 10 patterns and BR Baseline Requirements.

How does threat modeling help catch misconfigurations and policy violations early?▼

Threat modeling helps catch misconfigurations and policy violations early by identifying the threat surface and classifying risks for new changes, providing reference-driven workflows for governance and compliance.

Can I apply a repeatable security review process to infrastructure and services?▼

Yes, you can apply a repeatable security review process across APIs, services, and infrastructure to identify design weaknesses and generate a remediation plan for high-priority findings.

Does this security review workflow include dependency checks and secure configuration reviews?▼

Yes, this security review workflow includes dependency checks and secure configuration reviews to identify design weaknesses and enforce best practices before deployment.