eigi-security-review
Reviews recent changes, or a whole app, for the security problems AI-built web apps actually have: broken access control, tenant isolation, checks that live only in the UI, input that reaches a real sink, leaked secrets. It threat-models the change, walks an OWASP/CWE checklist over every changed file, runs whichever scanners are installed, and ends with a severity-ranked fix list plus one unhedged verdict, BLOCK or PROCEED WITH NOTES. Use after a feature lands, after a batch of AI-generated changes, before launch, or when asked "is this safe", "security review", "audit this", "can this be exploited". Reviews the diff by default; whole-system in pre-launch mode.
Pinned to revision de7d84e3b178, so it is the text this page describes rather than whatever the author pushed since.
Files
- skills/eigi-security-review/SKILL.md
- skills/eigi-security-review/LICENSE
- skills/eigi-security-review/references/catalog/api-security.md
- skills/eigi-security-review/references/catalog/authentication.md
- skills/eigi-security-review/references/catalog/authorization.md
- skills/eigi-security-review/references/catalog/business-logic.md
- skills/eigi-security-review/references/catalog/cryptography.md
- skills/eigi-security-review/references/catalog/csrf.md
- skills/eigi-security-review/references/catalog/data-protection.md
- skills/eigi-security-review/references/catalog/deserialization.md
- skills/eigi-security-review/references/catalog/error-handling.md
- skills/eigi-security-review/references/catalog/file-security.md
- skills/eigi-security-review/references/catalog/infrastructure/docker.md
- skills/eigi-security-review/references/catalog/injection.md
- skills/eigi-security-review/references/catalog/languages/javascript.md
- skills/eigi-security-review/references/catalog/languages/python.md
- skills/eigi-security-review/references/catalog/logging.md
- skills/eigi-security-review/references/catalog/misconfiguration.md
- skills/eigi-security-review/references/catalog/modern-threats.md
- skills/eigi-security-review/references/catalog/ssrf.md
- skills/eigi-security-review/references/catalog/supply-chain.md
- skills/eigi-security-review/references/catalog/xss.md
- skills/eigi-security-review/references/checklist-extended.md
- skills/eigi-security-review/references/checklist.md
- skills/eigi-security-review/references/data-flow-note.md
- skills/eigi-security-review/references/dependencies-secrets.md
- skills/eigi-security-review/references/output-format.md
- skills/eigi-security-review/references/strictness-rules.md
- skills/eigi-security-review/references/threat-model.md
Every link opens the file at its source, pinned to the revision this page describes.