security

Identify and remediate security vulnerabilities across codebases with zero-trust workflows.

2|1|Updated Mar 8, 2026
One-click install
npx skills add https://github.com/duggal1/Sapphire-cli --skill security-duggal1
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security
Source: https://github.com/duggal1/Sapphire-cli/tree/main/internal/skills/bundled/security
Command: npx skills add https://github.com/duggal1/Sapphire-cli --skill security-duggal1

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill enables security teams and developers to identify, isolate, and remediate vulnerabilities with a zero-trust mindset across codebases and deployments.

Core Features & Use Cases

  • Threat modeling and risk assessment to map attack paths and controls.
  • End-to-end vulnerability verification, remediation design, and secure implementation across the full software life cycle.
  • Documentation and post-fix validation to ensure remediation holds under real-world conditions.

Quick Start

Initiate a threat-modeling and vulnerability verification workflow against your codebase to begin secure remediation.

Frequently Asked Questions about security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I remediate security vulnerabilities with surgical precision in my codebase?

Threat modeling maps potential attack paths and evaluates existing controls to assess risk. By applying a zero-trust mindset, it identifies vulnerabilities across codebases and deployments to guide secure remediation workflows.

How do I verify that a security remediation holds under real-world conditions?

Post-fix validation verifies remediation by testing the secure implementation against real-world conditions. It requires full tool-chain verification and web-search-backed advisories to ensure the vulnerability containment actually holds.

What strict security controls do I need to implement for secure code remediation?

Secure code remediation requires implementing Zod-based input validation, parameterized queries, and environment-variable secrets. It also demands minimal error detail exposure to prevent information leakage during vulnerability containment.

Does this vulnerability remediation workflow support penetration testing and risk assessment?

Yes, the workflow supports penetration testing and risk assessment to identify and isolate vulnerabilities. It integrates end-to-end vulnerability verification and remediation design across the full software life cycle.