Review API endpoints, UI flows, and data access for actionable vulnerabilities.
npx skills add https://github.com/EdWrld/config.files --skill security-review-edwrld
Please help me install this Agent Skill. Skill: security-review Source: https://github.com/EdWrld/config.files/tree/main/skills/security-review Command: npx skills add https://github.com/EdWrld/config.files --skill security-review-edwrld
Helps organizations identify and remediate security weaknesses across API endpoints, UI flows, and data access layers, reducing risk before deployment.
Provide a scoped security review plan for the given API endpoints, UI flows, and data access in the current system.
High-intent search queries and answers about installing and using this skill.
A security review inventories endpoints, maps data flows, and applies threat modeling to identify vulnerabilities. It evaluates authorization, input validation, and session handling, generating a structured report with prioritized fixes and verification steps.
STRIDE threat modeling categorizes risks like spoofing, tampering, and elevation of privilege. It is needed during API security reviews to prioritize vulnerabilities systematically across endpoints, UI flows, and data access layers before deployment.
Dynamic testing for vulnerability assessment can be triggered when a running system is available. It complements static review by actively probing API endpoints and UI flows to uncover runtime security weaknesses.
Auditing authorization and session handling involves mapping data flows and evaluating access controls against threat models. This process identifies weaknesses in authentication layers and database interactions, producing actionable remediation steps.
This security review approach is applicable to systems with web APIs, authentication layers, and database interactions. It scopes reviews to your specific endpoints and UI flows to evaluate risk exposure and produce targeted fixes.
Prioritizing vulnerabilities found during an API security audit is done by applying threat modeling frameworks like STRIDE and LINDDUN. This categorizes risks by impact, generating a structured report with risk-prioritized remediation steps.
balic-AI-ML-R-D-ResourcesMap architecture, trust boundaries, and data flows for security audit scoping.
nksethIdentify security vulnerabilities in code and infrastructure and deliver prioritized audit reports with remediation guidance.
outfitter-devAudit codebases for security vulnerabilities and misconfigurations using OWASP and CWE mappings.
jinyimeng01Identify and validate WebSocket security weaknesses in real-time application channels.
