What problem does it solve? Security-relevant changes often ship without a systematic check for exploitable weaknesses, exposed secrets, or authorization defects. This Skill performs a bounded, evidence-backed security review of a diff, component, or repository and produces severity-ranked findings with the smallest correct fix for each. ## Core Features & Use Cases - Scoped Weakness Detection: Maps the attack surface of a defined scope and reviews injection surfaces, authentication and authorization paths, network posture, identity configuration, supply chain, and data handling against OWASP Top 10 categories. - Secret Exposure Handling: Classifies discovered secret material as confirmed, test-only, or false positive, records its location and rotation requirement, and never copies the secret value into reports. - Structured Reporting: Emits schema-validated JSON and Markdown reports where every finding cites a file path, an exploitable path or hardening classification, independent severity and confidence ratings, and enumerated unassessed scope. - Use Case: Before merging a pull request that adds a new API endpoint, run this Skill on the diff to confirm the endpoint enforces authorization, rank any gap found, and route remediation to the audit-plan-remediation workflow. ## Quick Start Review the changes in this pull request for security weaknesses and produce a severity-ranked findings report.
