Apply OWASP Top 10 and STRIDE to code, APIs, and system designs.
npx skills add https://github.com/a53ali/ai-dev --skill security-review-a53ali
Please help me install this Agent Skill. Skill: security-review Source: https://github.com/a53ali/ai-dev/tree/main/skills/engineer/security-review Command: npx skills add https://github.com/a53ali/ai-dev --skill security-review-a53ali
This Skill streamlines the process of conducting security reviews and threat modeling, ensuring that potential vulnerabilities are identified and mitigated early in the software development lifecycle.
Run the security-review skill on your pull request to automatically generate a security review report.
High-intent search queries and answers about installing and using this skill.
To automate a security review for a pull request, you can run this Skill to generate a structured report. It applies the OWASP Top 10 checklist and STRIDE threat model to your code, APIs, and system designs, producing a prioritized remediation checklist.
STRIDE threat modeling is a framework used to identify security threats across system designs and APIs. You should use it early in the software development lifecycle to systematically uncover vulnerabilities and generate a prioritized remediation checklist.
To check code against the OWASP Top 10, run this Skill on your repository. It integrates the OWASP Top 10 security risks into the review process, scanning your code and APIs to identify potential vulnerabilities.
Yes, conducting a security review requires an understanding of security principles and threat modeling. The Skill applies the STRIDE framework and OWASP Top 10 to your system designs, but foundational security knowledge is necessary to interpret and act on the findings.
as4584Apply STRIDE methodology to identify and categorize system security threats.
mhattingpeteAudit codebases for architecture, quality, security, performance, testing, and maintainability issues.
JosiahSiegelIntegrate Microsoft Defender for DevOps into Azure Pipelines for automated security scanning.
reomgitAudit code, infrastructure, and dependencies for OWASP Top 10 and STRIDE threats.
