security-review-process
Use when conducting a security review, threat-modeling a diff, scanning for secrets, or triaging dependency and supply-chain risk. OWASP Top 10 checklist, STRIDE threat model, secrets scanner, and secure coding patterns for the SR stage.
Pinned to revision cab547230493, so it is the text this page describes rather than whatever the author pushed since.
Files
- skills/security-review-process/SKILL.md
- skills/security-review-process/references/claude-code-hardening.md
- skills/security-review-process/references/owasp-checklist.md
- skills/security-review-process/references/review-template.md
- skills/security-review-process/references/threat-model.md
- skills/security-review-process/scripts/scan-secrets-selftest.sh
- skills/security-review-process/scripts/scan-secrets.sh
Every link opens the file at its source, pinned to the revision this page describes.