Identify security vulnerabilities in code during reviews and audits.
npx skills add https://github.com/mattphanm/Codex-Agentic --skill security-mattphanm
Please help me install this Agent Skill. Skill: security Source: https://github.com/mattphanm/Codex-Agentic/tree/main/.codex/skills/security Command: npx skills add https://github.com/mattphanm/Codex-Agentic --skill security-mattphanm
Security reviews are often skipped or rushed, leaving critical vulnerabilities unaddressed; this Skill provides a formal mechanism to identify, document, and remediate security gaps before merging changes.
Run a comprehensive security review on the latest changes to identify vulnerabilities and verify adherence to best practices.
High-intent search queries and answers about installing and using this skill.
Security reviews catch vulnerabilities before merge by applying structured checks for input validation, injection prevention, authentication controls, and secrets handling. This formal process ensures common weaknesses are documented and remediated before deployment.
Threat modeling during security reviews systematically identifies potential vulnerabilities like weak authorization or insecure secrets handling. It provides a structured checklist and evidence gathering to support reproducible security assessments before merging code changes.
Perform a security audit on new features by applying a comprehensive review checklist verifying adherence to best practices. This includes checking input validation, authentication controls, and secrets handling, then producing traceable risk documentation with actionable recommendations.
The best way to document security risks is by producing structured findings with actionable recommendations that feed directly into tickets and documentation. This ensures traceable risk reporting per internal guidelines and reproducible security assessments.
Yes, you can run security reviews on spec-group implementations and PRs. The review applies comprehensive checks for input validation, injection prevention, authentication authorization controls, and secrets handling to catch vulnerabilities before merge.
Security reviews are often skipped or rushed due to time constraints, leaving critical vulnerabilities unaddressed. Implementing a formal mechanism with a structured checklist ensures security gaps are identified, documented, and remediated before merging code changes.
rnbenAutomates pre-commit verification with security scans, baseline tests, and an auto-fix loop.
EvilBit-LabsIdentify security gaps in codebases and configurations with remediation checklists.
jewbetchaIdentify and mitigate security vulnerabilities in code and configurations.
DevHive1Orchestrate dependency, static analysis, and privacy dataflow scanners into prioritized reports.
