Guide security reviews with OWASP Top 10, threat modeling, and secure coding checklists.
npx skills add https://github.com/doancan/mags --skill security-review-doancan
Please help me install this Agent Skill. Skill: security-review Source: https://github.com/doancan/mags/tree/main/skills/security-review Command: npx skills add https://github.com/doancan/mags --skill security-review-doancan
Provides structured guidance for security reviews throughout the software lifecycle, helping teams identify threats, enforce secure design, and reduce risk.
Trigger the security-review guidance to perform a rapid, risk-based security assessment for your project.
High-intent search queries and answers about installing and using this skill.
A structured security review applies threat modeling, secure coding practices, and OWASP Top 10 checklists across design, development, and deployment to identify and mitigate software project risks.
STRIDE analysis in threat modeling identifies software security threats by categorizing risks into Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege across data flows.
Check OWASP Top 10 vulnerabilities by applying a structured security checklist that verifies secure coding practices and mitigations for common web application risk categories during development.
Threat modeling documentation is needed during software design, development, and deployment to enforce secure design checklists, map data flows, and provide actionable security recommendations for risk assessment.
Secure coding practices integrate into existing development workflows through risk-based design reviews and security checklists applied systematically across software design, development, and deployment phases.
johngutierrez31Apply STRIDE threat analysis to system architecture diagrams.
syl2042Enforce language-specific security best practices in code reviews.
rfdiosuaoAudit application code for OWASP Top 10 vulnerabilities and CVE impacts.
anevjesDetect Azure security risks, compliance violations, and configuration issues.
