القائمة
Repeatable process for an application security code review that produces prioritized findings and fix guidance.
التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.
استنادا إلى تصنيف SOC المهني
Analyze repository-grounded identity, access control, and authorization design with evidence-first reporting and script-validated Mermaid diagrams.
Triage a dependency CVE using local repo evidence and remediation guidance.
Threat model a system, feature, service, or PR using Shostack's 4Q workflow, evidence-first analysis, risk scoring, and CLI-friendly Mermaid helper scripts.
Analyze repository-grounded identity, access control, and authorization design with evidence-first reporting and script-validated Mermaid diagrams.
Threat model a system, feature, service, or PR using Shostack's 4Q workflow, evidence-first analysis, risk scoring, and CLI-friendly Mermaid helper scripts.
Review workflow for AI/LLM output usage to prevent over-trust, injection, and unsafe automation.
| name | secure-code-review |
| description | Repeatable process for an application security code review that produces prioritized findings and fix guidance. |
Use this skill when asked to review code for security, produce findings, or prepare guidance for remediation.
If this repo includes prompt files under /prompts, the following are commonly relevant:
secure-code-review.prompt.mdscan-for-insecure-apis.prompt.mdvalidate-input-handling.prompt.mdreview-auth-flows.prompt.md