florianbuetow/appsec

v0.1.2MIT

Comprehensive application security toolbox for Codex. 62 skills across 8 frameworks (OWASP Top 10, OWASP API Top 10, STRIDE, PASTA, LINDDUN, MITRE ATT&CK, SANS/CWE Top 25, DREAD), red team simulation with 6 attacker personas plus consolidator, and interactive security education.

GitHub

skills

serverless

This skill should be used when the user asks to "check serverless security", "audit Lambda functions", "analyze cloud function permissions", "check IAM policies", "find serverless vulnerabilities", or mentions "serverless", "Lambda", "Cloud Functions", "Azure Functions", "IAM policy", "event injection", "overprivileged", or "/tmp reuse" in a security context.

Read SKILL.md at the source

Pinned to revision 8dd1fdc0bd68, so it is the text this page describes rather than whatever the author pushed since.

Files

skills/serverless/SKILL.md
skills/serverless/references/detection-patterns.md

Every link opens the file at its source, pinned to the revision this page describes.