| name | security-review-pro |
| description | Professional security review and threat modeling for repositories, APIs, desktop apps, web apps, authentication, authorization, secrets, dependency risk, and data flows. Inspired by OpenAI security-best-practices and security-threat-model skills, adapted for Codex v4.1. |
Security Review Pro
Workflow
- Identify assets: credentials, tokens, user data, payment data, files, admin actions, infrastructure access.
- Identify actors and trust boundaries: browser, desktop renderer, backend, third-party APIs, database, filesystem, queues.
- Trace data flows and attacker-controlled inputs.
- Review authentication, authorization, validation, secrets, logging, storage, transport, and dependencies.
- Prioritize exploitability and impact.
- Propose concrete fixes and verification.
Review Checklist
- Broken access control.
- Injection: SQL, shell, template, path, URL, LDAP, NoSQL.
- XSS, CSRF, SSRF, open redirect.
- Insecure token storage, refresh, logout, and session expiry.
- Missing rate limits or abuse controls.
- Unsafe file upload/download and path traversal.
- Sensitive data in logs, errors, telemetry, or client bundles.
- Insecure desktop IPC, Tauri capabilities, Electron preload, or native bridge.
- Dependency, build, and CI secret exposure.
Output
Use review findings:
发现：
- [P1] ...
修复：
- ...
验证：
- ...
If no critical issue is found, state residual risk and what was not reviewed.
Boundaries
- Do not claim files, generated media, deployments, scans, account changes, or external writes unless the active tool or command output proves them.
- Do not override system, developer, user, project, or selected-skill rules.
- If another skill is more specific for the user's intent, hand off or use it as the main skill instead of duplicating its workflow.
