Evaluate code for OWASP Top 10 and supply-chain security risks.
npx skills add https://github.com/benediktms/overmind --skill sentinel-benediktms
Please help me install this Agent Skill. Skill: sentinel Source: https://github.com/benediktms/overmind/tree/main/cli/claudecode-plugin/skills/sentinel Command: npx skills add https://github.com/benediktms/overmind --skill sentinel-benediktms
This skill helps security teams identify OWASP Top 10 risks, auth/authz gaps, secrets exposure, injection vectors, unsafe deserialization, and supply-chain risks early in the development lifecycle.
Run a security review on the target codebase using sentinel to generate a prioritized findings report.
High-intent search queries and answers about installing and using this skill.
A pre-merge code audit evaluates new endpoints and data flows for OWASP Top 10 risks, injection vectors, and auth gaps. It generates a prioritized findings report ranked by severity, exploitability, and blast radius.
Automated security risk triage evaluates new endpoints for auth checks, secrets handling, and injection vectors. It ranks findings by severity, exploitability, and blast radius to prioritize security fixes.
Checking your codebase for supply-chain risks and secrets exposure involves evaluating dependencies and integration points. This threat-focused review identifies unsafe patterns early in the development lifecycle and suggests secure code alternatives.
Yes, you can run a post-delivery threat review on existing codebases to identify authorization gaps and injection vectors. This assesses security-sensitive changes across projects and provides remediation guidance before merging.
The best way to prioritize security vulnerabilities during a code audit is by ranking findings using severity, exploitability, and blast radius. This automated risk triage approach ensures critical threats are addressed before merging.
DanielPodolskyReview code changes for security vulnerabilities before merge or deployment.
acardozzoScan source code for OWASP Top 10 vulnerabilities and map findings to ASVS and CWE references.
saschadudkin-sketchDetect secrets and vulnerabilities in code repositories with semgrep and gitleaks.
GhostPWNAssess AI and LLM application security risks with OWASP LLM Top 10 mapping.
