Skills that look for security problems: secret leaks, injection, unsafe CI configuration and excessive permissions.
A security checklist with code patterns for secrets, input validation, SQL injection, auth, XSS, CSRF, rate limiting, sensitive data and dependencies.
One-shot quality audit of a whole repo for bugs, security holes, load problems, untested risky code, slow paths and code to delete, merge or split.
Evidence-first security audit via the gstack-cso helper that reports supported findings; comprehensive mode adds reproduction and repair candidates.
White-box security review with Strix: reads source for data flow and authorization, then attempts exploitation in a sandbox with a PoC.
Defensive, source-first security review that finds vulnerabilities crossing a real trust boundary, with evidence, safe reproduction, priority and fix.
Uses STRIDE to identify threats: spoofing, tampering, repudiation, information disclosure, denial of service and elevation of privilege.
No matching skills. Adjust your keywords or switch category.