Audit code, configurations, and deployments for security best practices.
npx skills add https://github.com/rbaumier/skills --skill security-defensive
Please help me install this Agent Skill. Skill: security-defensive Source: https://github.com/rbaumier/skills/tree/main/security-defensive Command: npx skills add https://github.com/rbaumier/skills --skill security-defensive
This Skill helps teams embed security into the software lifecycle, reducing the risk of insecure code, misconfigurations, and weak authentication by codifying robust defensive rules and practices.
Analyze a codebase to identify security gaps, prioritize remediation, and generate a concrete improvement plan.
High-intent search queries and answers about installing and using this skill.
To audit code for OWASP Top 10 vulnerabilities, analyze server and client code, APIs, and infrastructure to surface risks like prototype pollution, RCE, SSRF, and IDOR. This enforces strict schema validation and structured audit logging to identify security gaps.
The best way to harden a REST API before deployment is applying a structured checklist that enforces secure cookie usage, CSP, strict CORS policies, and TLS. This ensures robust authentication, authorization, and CSRF protection on state-changing endpoints.
Input validation prevents security risks in microservices by enforcing strict schema validation across web services and APIs. This defensive practice stops malicious payloads from exploiting weak authentication, poor token handling, or insecure configurations.
Yes, you can use this for threat modeling and security reviews of web services. It systematically reviews server and client code to surface data leakage risks, address CSRF, and prescribe concrete fixes for identified authentication or authorization gaps.
You need strict schema validation and RBAC for software security because they enforce robust defensive rules against unauthorized access and malicious inputs. Combined with secure token handling and structured audit logging, they drive pre-deployment hardening and reduce data leakage risks.
Yes, this security review covers secrets management and infrastructure hygiene. It audits code, configurations, and deployments to enforce TLS, CSP, and structured audit logging, ensuring comprehensive protection aligned with OWASP best practices.
trailofbitsMap security audit findings to commits and rate fix quality.
flavien-iaAudit Next.js and T3 stack applications for security vulnerabilities across twelve categories.
barrydobsonAdvocate DevOps principles including CI/CD, IaC, automated testing, monitoring, and security scanning for delivery pipelines.
rnavarychAutomate security testing with Snyk, Semgrep, Gitleaks, and OWASP ZAP in CI/CD pipelines.
