security-review-owasp-pinning

What problem does it solve?

This Skill helps reviewers find weaknesses in pinning-related trust establishment, transport security, and integrity protections before they become spoofing, tampering, or interception issues.

Core Features & Use Cases

• Trust Validation Review: Checks certificate, hostname, header, signature, and endpoint trust decisions for strict enforcement instead of implicit trust.
• Transport and Integrity Analysis: Evaluates encryption, replay resistance, downgrade resistance, proxy behavior, and termination assumptions that can weaken protection.
• Operational Security Review: Looks for rotation, revocation, renewal, monitoring, and deployment drift issues that undermine trust over time.
• Use Case: Review a service-to-service integration, webhook receiver, or TLS-terminated application to confirm whether the intended trust boundary is actually enforced.

Quick Start

Ask Copilot to review the selected files or flow with the security-review-owasp-pinning skill and report confirmed trust, transport, integrity, and lifecycle issues.