skills.rest
bigeasyfreeman
bigeasyfreemanCOMMUNITY
Explore all skills by this author →
GitHub

security-review

Automate STRIDE threat modeling and OWASP Top 10 scanning on code changes before merging.

2|1|Updated Apr 7, 2026
Search Tags:#code review#OWASP#security#STRIDE#vulnerability scanning
One-click install
npx skills add https://github.com/bigeasyfreeman/adlc --skill security-review-bigeasyfreeman
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/bigeasyfreeman/adlc/tree/main/skills/security-review
Command: npx skills add https://github.com/bigeasyfreeman/adlc --skill security-review-bigeasyfreeman

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill ensures that security considerations are integrated into the development lifecycle, with automated STRIDE threat modeling and OWASP vulnerability scanning to mitigate risks before code merges.

Core Features & Use Cases

  • STRIDE Threat Modeling: Automatically applies STRIDE threat modeling to identify potential security issues in development tasks.
  • OWASP Scanning: Performs OWASP Top 10 vulnerability scanning on code changes to detect common security vulnerabilities.
  • Applicability Gate: Dynamically triggers security analysis based on task-specific criteria.
  • Security Contract: Generates a security contract for developers to follow when addressing identified issues.

Quick Start

Run the security-review skill to automatically perform security checks on your current task.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate OWASP Top 10 vulnerability scanning on code changes before merging?▼

Automating OWASP vulnerability scanning on code changes before merging is achieved by running the security-review skill, which dynamically triggers analysis based on task-specific criteria to detect and mitigate common security risks.

What is STRIDE threat modeling and how does it apply to development tasks?▼

STRIDE threat modeling is a framework for identifying potential security issues like spoofing or repudiation. The security-review skill automatically applies this modeling to development tasks to detect vulnerabilities early in the lifecycle.

Can I automatically generate a security contract for developers after vulnerability scanning?▼

Generating a security contract for developers is supported after vulnerability scanning. The security-review skill produces this contract to guide developers in addressing and mitigating the specific security issues identified during analysis.

Does this security analysis require external dependencies to run STRIDE and OWASP scans?▼

Running STRIDE and OWASP scans requires the respective STRIDE and OWASP analysis frameworks. The security-review skill depends on these frameworks to automate threat modeling and detect vulnerabilities in code changes.

When do I need automated security analysis during the development lifecycle?▼

Automated security analysis is needed when you want to mitigate risks before code merges. The security-review skill uses an applicability gate to dynamically trigger STRIDE and OWASP checks based on specific task criteria.

Best way to integrate STRIDE threat modeling into an existing software engineering workflow?▼

The best way to integrate STRIDE threat modeling is by running the security-review skill on your current task. It automatically applies the model to identify security issues and generates a security contract for developers to follow.

Related Skills

Explore More Software Engineering Skills→
luissimon96luissimon96

graph-security

Automate security audits with OWASP Top 10, STRIDE, dependency audit, and secrets scanning.

Community
Advanced
cashwucashwu

cash-audit

Analyze git diffs for security vulnerabilities through adversarial simulation.

Community
Advanced
Tonybleything76Tonybleything76

senior-security

Run STRIDE threat modeling and DREAD risk scoring with Python scripts.

Community
Advanced
FrekiManagarmFrekiManagarm

source-command-sparc-security-review

Perform static and dynamic code audits to flag security vulnerabilities.

Community
Advanced