security-review

Automates security reviews of code and architecture using OWL Top 10 and STRIDE threat modeling.

1|Updated Jun 19, 2026

Search Tags:#vulnerability assessment #STRIDE #security review #code security #OWASP Top 10

Ready to run

npx skills add https://github.com/9thLevelSoftware/legion-ascended --skill security-review-9thlevelsoftware

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/9thLevelSoftware/legion-ascended/tree/main/skills/security-review
Command: npx skills add https://github.com/9thLevelSoftware/legion-ascended --skill security-review-9thlevelsoftware

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires legion, OWASP ZAP, STRIDE analysis tools, and includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill automates security reviews using OWASP Top 10 and STRIDE threat modeling, reducing the manual effort and potential oversight in security checks.

Core Features & Use Cases

OWASP Top 10 Evaluation: Assess code against the OWASP Top 10 security standard.
STRIDE Threat Modeling: Analyze system boundaries for potential security threats.
Codebase-Aware Activation: Trigger reviews automatically for security-sensitive files.
Use Case: Incorporate this Skill into your CI/CD pipeline to perform regular security scans during development and prevent vulnerabilities from being introduced.

Quick Start

Run the security review by executing the 'security' flag during code reviews or on demand with '/legion:review --security'.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I automate security reviews using OWASP Top 10 and STRIDE threat modeling?▼

You can automate security reviews by triggering this Skill during code reviews or CI/CD pipelines, which evaluates code against the OWASP Top 10 standard and performs STRIDE threat modeling to identify vulnerabilities.

What is STRIDE threat modeling and when do I need it for code security?▼

STRIDE threat modeling analyzes system boundaries to identify potential security threats. You need it during software development to ensure architecture-level vulnerabilities are found and mitigated before deployment.

Does this automated security review tool require OWASP ZAP and Legion?▼

Yes, this security review Skill requires the Legion framework and STRIDE analysis tools, integrating with OWASP ZAP to execute automated vulnerability assessments and threat modeling.

Can I trigger code security scans automatically for security-sensitive files?▼

Yes, codebase-aware activation automatically triggers security scans when security-sensitive files are modified, allowing you to perform regular vulnerability assessments without manual intervention.

What's the best way to incorporate vulnerability assessment into a CI/CD pipeline?▼

Incorporate vulnerability assessment by running this Skill during code reviews or on demand with the security flag, executing regular OWASP Top 10 evaluations and STRIDE analysis to prevent vulnerabilities during development.

What are the limitations of using STRIDE analysis tools for code security?▼

STRIDE analysis tools focus on system boundaries and architecture-level threats, meaning they identify common security issues but must be paired with OWASP Top 10 evaluations to ensure comprehensive code security coverage.