Identify security risks in code changes via threat modeling, secret checks, and dependency audits.
npx skills add https://github.com/hcross/crewrig --skill security-hcross
Please help me install this Agent Skill. Skill: security Source: https://github.com/hcross/crewrig/tree/main/.gemini/skills/security Command: npx skills add https://github.com/hcross/crewrig --skill security-hcross
Security reviews for changes, threat modeling, secret hygiene, and dependency audits are automated to reduce risk and speed up shipping.
Analyze the latest change set for security implications and output prioritized fixes.
High-intent search queries and answers about installing and using this skill.
You can automate security reviews on PRs by applying threat modeling, secret hygiene checks, and dependency audits directly to code changes. This generates deterministic checks, traceable findings, and actionable remediation guidance for CI review workflows.
Threat modeling on a diff checks for security risks introduced by code changes across authentication, authorization, secrets handling, cryptography, input parsing, deserialization, and network calls. It outputs prioritized fixes to reduce risk and speed up shipping.
Yes, you can use this for dependency audits and secret hygiene checks. It evaluates credential handling and dependency upgrades introduced by code changes, providing traceable findings and actionable remediation guidance.
Automated code review works with authentication and cryptography changes by applying a security lens to the diff. It identifies security risks introduced by these specific code changes and outputs prioritized fixes suitable for integration into CI workflows.
Analyze the latest change set for security implications by running threat modeling, secret hygiene checks, and dependency audits on the diff. This outputs prioritized fixes and actionable remediation guidance across authentication, authorization, and network calls.
The best way to surface security fixes during a pull request review is to run an automated security pass on the diff. This applies deterministic checks to input parsing, deserialization, and cryptography changes, outputting traceable findings and prioritized remediation guidance.
ivegamsftAutomate security audits, threat modeling, and vulnerability assessments for code.
MetalLegBobAnalyze code changes for security risks using git history and test coverage.
rahmatullahbossScan SSH services, audit configurations, and test credentials.
florianbuetowScan code and dependencies for vulnerabilities mapped to CWEs.
