speclink-audit

Automated security vulnerability detection in code changes is performed by simulating attacks from malicious, lazy, and confused developer perspectives to uncover issues like dangerous defaults and type confusion before deployment.

Automated code analysis detects security vulnerabilities such as dangerous defaults, type confusion, and silent failures. It simulates adversary perspectives to uncover these specific security issues within your codebase changes.

Adversary analysis for secure code review works by simulating attacks from three perspectives: a malicious actor, a lazy developer, and a confused developer. This simulation uncovers security issues that standard reviews might miss.

Yes, you need the speclink CLI installed to execute security code reviews. The audit skill requires this command-line interface dependency to analyze code changes and detect vulnerabilities.

Use Standalone mode for detailed code analysis and Discipline mode during implementation for a quick security checklist. Both modes detect vulnerabilities but differ in analysis depth and workflow integration timing.

The best way to integrate vulnerability detection into a software engineering workflow is running security audits on current codebase changes before deployment. This ensures compliance and identifies issues early through automated adversary simulation.