Review application code changes for security vulnerabilities and baseline controls.
npx skills add https://github.com/motoedie/.dotfiles --skill security-motoedie
Please help me install this Agent Skill. Skill: security Source: https://github.com/motoedie/.dotfiles/tree/main/ai-tools/skills/security Command: npx skills add https://github.com/motoedie/.dotfiles --skill security-motoedie
This Skill provides a structured approach to identifying and mitigating security vulnerabilities in code changes, ensuring applications are built and maintained with robust security practices.
Use the security skill to review the code changes in the current commit for potential vulnerabilities.
High-intent search queries and answers about installing and using this skill.
Perform a security review by applying baseline controls derived from OWASP to code changes, identifying vulnerabilities in untrusted input, authentication, sessions, and file operations before merging.
Secure coding for untrusted input involves validating data and parameterizing database queries to prevent injection attacks, ensuring applications enforce robust security practices during changes.
Check code for path traversal and file type validation flaws by reviewing file operations and user upload handling logic against secure coding standards to detect and mitigate potential risks.
Use automated security checks to scan for secrets management and deserialization risks, applying targeted checks to detect hardcoded secrets and unsafe deserialization in application changes.
This approach identifies dependency risks and command execution vulnerabilities by enforcing baseline security controls that address unsafe external library usage and improper command execution.
ylxmf2005Trace untrusted input paths to harmful sinks in code changes.
beratcelik1Audit application code and deployment configurations for security vulnerabilities.
mouratoEnforce secure-by-default controls and threat modeling for application security posture.
kivo360Mitigate security vulnerabilities in CI/CD pipelines using OWASP Top 10 and SAST/DAST workflows.
