Evaluate planning documents for security gaps and prioritized risks.
npx skills add https://github.com/xbpk3t/ce-codex --skill security-lens-reviewer
Please help me install this Agent Skill. Skill: security-lens-reviewer Source: https://github.com/xbpk3t/ce-codex/tree/main/skills/security-lens-reviewer Command: npx skills add https://github.com/xbpk3t/ce-codex --skill security-lens-reviewer
This Skill helps security reviewers and architects detect missing security considerations in planning documents before implementation, focusing on attack surface, auth/authz assumptions, data exposure, third-party trust boundaries, and secrets management so risks are addressed earlier in the lifecycle.
Review this plan and produce per-element security findings, confidence levels, and a concise top-three plan-level threat model with one-sentence mitigations.
High-intent search queries and answers about installing and using this skill.
Review architecture plans for security gaps by evaluating attack surface, auth/authz assumptions, data exposure, third-party trust boundaries, and secrets management. This process produces per-element findings and prioritized risks to address vulnerabilities early in the lifecycle.
Plan-level threat modeling evaluates planning documents like design proposals and architecture plans for security gaps before implementation. It identifies missing controls across attack surfaces and trust boundaries, whereas code review analyzes implemented logic for vulnerabilities.
Identify undocumented trust assumptions in a design proposal by assessing third-party integrations and failure modes. The review surfaces undocumented trust boundaries and highlights new roles or privilege changes requiring explicit access controls.
Yes, you can use this for PR-level design descriptions and compliance checkpoints. It evaluates product and architecture plans to flag functionality missing actor or permission decisions and produces explicit findings for missing controls.
Yes, this security review covers data exposure and secrets management practices. It assesses the identification of sensitive data, protections for transit, rest, and logs, data retention policies, and credential management to produce explicit findings.
Generate a concise top-three threat model with mitigations by evaluating planning documents for attack surface inventory and auth/authz gaps. The review outputs the top three likely plan-level exploits each paired with a one-sentence mitigation.
davidrrowleyProduce structured STRIDE threat models with DFD diagrams and DREAD scoring.
marcosd4hCompute unified exploitability scores for taint findings from reports.
sunLeeeValidate Python logging conventions for quality and security.
johngutierrez31Analyze security events using threat modeling and zero-trust frameworks.
