Identify security vulnerabilities and design weaknesses in codebases before deployment.
npx skills add https://github.com/curphey/bosun --skill security-curphey
Please help me install this Agent Skill. Skill: security Source: https://github.com/curphey/bosun/tree/main/skills/security Command: npx skills add https://github.com/curphey/bosun --skill security-curphey
Security review discipline helps teams catch vulnerabilities, misconfigurations, and policy violations early in the software lifecycle, reducing risk and remediation costs.
Review a code change with the Security Review Skill to identify high-priority findings and generate a remediation plan.
High-intent search queries and answers about installing and using this skill.
To identify security vulnerabilities before deployment, apply a repeatable review process using threat modeling, vulnerability scanning, dependency checks, and secure configuration reviews across APIs and services.
The best way to perform an OWASP-aligned security review is to use guided vulnerability checks that classify risk and flag red indicators, enforcing a core checklist that references OWASP Top 10 patterns and BR Baseline Requirements.
Threat modeling helps catch misconfigurations and policy violations early by identifying the threat surface and classifying risks for new changes, providing reference-driven workflows for governance and compliance.
Yes, you can apply a repeatable security review process across APIs, services, and infrastructure to identify design weaknesses and generate a remediation plan for high-priority findings.
Yes, this security review workflow includes dependency checks and secure configuration reviews to identify design weaknesses and enforce best practices before deployment.
SaturateAnalyze software security to identify vulnerabilities and attack surfaces.
LerianStudioAutomate infrastructure security audits with phased scanning and compliance mapping.
jaskaranhundalEnforce security gates across SDLC stages from requirements to operations.
truongnatPerform STRIDE threat analysis and OWASP-guided vulnerability assessments.
