security-diagnosis

What problem does it solve?

This Skill helps you regularly identify security and compliance gaps across an entire codebase by focusing on secrets exposure, authentication/authorization weaknesses, injection risks, dependency/CVE issues, logging/monitoring blind spots, and policy adherence.

Core Features & Use Cases

• Codebase-wide security posture diagnosis: Performs a recurring, threat-model-driven review at the repository level (including delta mode against previous reports).
• Targeted deep dives by domain: Supports focused modes such as secrets, auth, injection, dependencies/CVE, and quick summaries.
• Safety-first reporting: Emphasizes masking sensitive values, avoids public exploit payloads, and validates findings to reduce false positives.

Quick Start

Run the security-diagnosis Skill to produce a full security and compliance diagnosis report for the current codebase by answering the threat-model questions when prompted.