skills.rest
9thLevelSoftware
9thLevelSoftwareCOMMUNITY
Explore all skills by this author →
GitHub

security-review

Automates security reviews of code and architecture using OWL Top 10 and STRIDE threat modeling.

1|Updated Jun 19, 2026
Search Tags:#vulnerability assessment#STRIDE#security review#code security#OWASP Top 10
One-click install
npx skills add https://github.com/9thLevelSoftware/legion-ascended --skill security-review-9thlevelsoftware
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/9thLevelSoftware/legion-ascended/tree/main/skills/security-review
Command: npx skills add https://github.com/9thLevelSoftware/legion-ascended --skill security-review-9thlevelsoftware

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires legion, OWASP ZAP, STRIDE analysis tools, and includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill automates security reviews using OWASP Top 10 and STRIDE threat modeling, reducing the manual effort and potential oversight in security checks.

Core Features & Use Cases

  • OWASP Top 10 Evaluation: Assess code against the OWASP Top 10 security standard.
  • STRIDE Threat Modeling: Analyze system boundaries for potential security threats.
  • Codebase-Aware Activation: Trigger reviews automatically for security-sensitive files.
  • Use Case: Incorporate this Skill into your CI/CD pipeline to perform regular security scans during development and prevent vulnerabilities from being introduced.

Quick Start

Run the security review by executing the 'security' flag during code reviews or on demand with '/legion:review --security'.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate security reviews using OWASP Top 10 and STRIDE threat modeling?▼

You can automate security reviews by triggering this Skill during code reviews or CI/CD pipelines, which evaluates code against the OWASP Top 10 standard and performs STRIDE threat modeling to identify vulnerabilities.

What is STRIDE threat modeling and when do I need it for code security?▼

STRIDE threat modeling analyzes system boundaries to identify potential security threats. You need it during software development to ensure architecture-level vulnerabilities are found and mitigated before deployment.

Does this automated security review tool require OWASP ZAP and Legion?▼

Yes, this security review Skill requires the Legion framework and STRIDE analysis tools, integrating with OWASP ZAP to execute automated vulnerability assessments and threat modeling.

Can I trigger code security scans automatically for security-sensitive files?▼

Yes, codebase-aware activation automatically triggers security scans when security-sensitive files are modified, allowing you to perform regular vulnerability assessments without manual intervention.

What's the best way to incorporate vulnerability assessment into a CI/CD pipeline?▼

Incorporate vulnerability assessment by running this Skill during code reviews or on demand with the security flag, executing regular OWASP Top 10 evaluations and STRIDE analysis to prevent vulnerabilities during development.

What are the limitations of using STRIDE analysis tools for code security?▼

STRIDE analysis tools focus on system boundaries and architecture-level threats, meaning they identify common security issues but must be paired with OWASP Top 10 evaluations to ensure comprehensive code security coverage.

Related Skills

Explore More Software Engineering Skills→
Ed1s0nZEd1s0nZ
5.6k

security-automation

Automate vulnerability scanning and security testing in CI/CD pipelines.

Community
Advanced
gulati8gulati8
3

security-checklist

Apply OWASP Top 10 and STRIDE to identify security risks in changed files.

Community
Intermediate
smarmen86smarmen86

cso

Automate infrastructure security audits and threat modeling for software projects.

Community
Advanced
NickCrewNickCrew
29

security-testing-patterns

Identify and mitigate security vulnerabilities in CI/CD pipelines.

Community
Advanced