What problem does it solve? Security reviews often produce speculative best-practice lists or raw scanner output without proof of real risk. This Skill enforces a disciplined red-team methodology: every reported finding must include a reproducible exploit path and a verified mitigation, so teams fix what is actually exploitable. ## Core Features & Use Cases - Threat Modeling and Surface Mapping: Names adversary profiles, goals, entry points, and trust boundaries before any testing begins. - Anti-Fabrication Gate: Drops any finding lacking a concrete entry point, ordered steps, and realized impact, keeping reports free of noise. - Mitigation Verification: Prescribes minimal fixes and defines how to re-test that each exploit path is closed. - Use Case: Before launching an API that handles payments, run an authorized review covering auth flows, IDOR, injection, and rate-limit bypass, then receive a report containing only confirmed vulnerabilities with fixes. ## Quick Start Ask the agent to red-team review the authentication and authorization code in this repository and report only findings with a reproducible exploit path.
