security-analysis
Report-only security analysis of code changes and selected paths for vulnerabilities and security test gaps. Reviews untrusted input, auth, sessions, APIs, files, network calls, commands, queries, parsing, secrets, and dependencies. Supports uncommitted, staged, branch, base-ref, revision-range, and path scopes; quick, standard, deep, and focus options.
Pinned to revision 371dd1e3f703, so it is the text this page describes rather than whatever the author pushed since.
Files
- skills/security-analysis/SKILL.md
- skills/security-analysis/README.md
- skills/security-analysis/evals/evals.json
- skills/security-analysis/passes/additional-topics.md
- skills/security-analysis/passes/api-and-browser.md
- skills/security-analysis/passes/api-security.md
- skills/security-analysis/passes/authentication-and-sessions.md
- skills/security-analysis/passes/authorization-and-tenant-isolation.md
- skills/security-analysis/passes/cryptography-and-secrets.md
- skills/security-analysis/passes/exploit-validation.md
- skills/security-analysis/passes/extended-cryptography.md
- skills/security-analysis/passes/extended-files.md
- skills/security-analysis/passes/files-and-network.md
- skills/security-analysis/passes/identity-and-cryptography.md
- skills/security-analysis/passes/input-and-content.md
- skills/security-analysis/passes/operational-readiness.md
- skills/security-analysis/passes/owasp-secure-coding-review.md
- skills/security-analysis/passes/security-test-generation.md
- skills/security-analysis/passes/sensitive-data-flow.md
- skills/security-analysis/passes/specialized-injection.md
- skills/security-analysis/passes/supply-chain.md
- skills/security-analysis/passes/threat-modeling.md
- skills/security-analysis/references/arguments.md
- skills/security-analysis/references/large-scope.md
- skills/security-analysis/references/models.md
- skills/security-analysis/references/output-format.md
- skills/security-analysis/references/review-rules.md
- skills/security-analysis/references/verify-findings.md
- skills/security-analysis/scripts/scan-static.mjs
- skills/security-analysis/tests/test_scan_static.mjs
Every link opens the file at its source, pinned to the revision this page describes.