Review codebases for security risks and generate threat models.
npx skills add https://github.com/oornnery/skills --skill security-oornnery
Please help me install this Agent Skill. Skill: security Source: https://github.com/oornnery/skills/tree/main/skills/security Command: npx skills add https://github.com/oornnery/skills --skill security-oornnery
Security review, threat modeling, and secure-by-default guidance. Helps teams review changes for vulnerabilities, audit risk, and generate threat models to guide secure design.
Review the codebase and produce a threat model along with secure-by-default guidance.
High-intent search queries and answers about installing and using this skill.
Security review and threat modeling for a codebase involves mapping assets, trust boundaries, and attack surfaces to identify vulnerabilities. This process applies structured assessments across APIs, backends, frontends, and CLIs to guide secure design and risk prioritization.
Secure-by-default guidance provides actionable patterns for defense-in-depth by enforcing default-deny principles, input validation, least privilege, and secure configuration. It helps reduce security risks by guiding secure coding practices across various deployment environments.
Yes, you can apply threat modeling to backend APIs, frontends, and CLIs across multiple languages and deployment environments. The process maps attack surfaces and trust boundaries to generate secure design guidance for these diverse components.
To prioritize security risks during a code review, you apply structured assessments to identify risk hotspots and generate auditable remediation steps. This approach ensures vulnerabilities are ranked by severity and secure design is guided accordingly.
Enforcing least privilege and default-deny principles in secure configuration requires applying structured secure-by-default guidance. This involves reviewing architecture to ensure input validation and auditable remediation steps are implemented across the codebase.
ncsound919Identify and document repository-specific threat models for defensive security.
matteocervelliAssess software vulnerabilities with CVSS scoring and remediation planning.
riftzen-bitIdentify and remediate security misconfigurations in Java Spring Boot services.
pdparchitectFingerprint target infrastructure and load context-specific security attack modules.
