Menu
OWASP secure design review for code and architecture. Checks input validation, authentication, authorization, data protection.
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
Based on SOC occupation classification
Accessibility audit against WCAG 2.1 AA. Checks semantic HTML, ARIA, keyboard navigation, color contrast, screen reader compatibility.
Design the smallest viable test to validate or invalidate a critical assumption. Based on Torres's assumption testing framework.
Use before any research activity or significant decision. Reviews cognitive biases relevant to the current stage.
Use to evaluate whether current work aligns with Better Value Sooner Safer Happier. Run at diamond completion and periodically.
Synchronize canvas state across team sessions via git. Ensures all team members see the same product knowledge.
Update canvas sections with new evidence. Ensures canvas stays current as the single source of truth.
| name | security-review |
| description | OWASP secure design review for code and architecture. Checks input validation, authentication, authorization, data protection. |
Language-agnostic security review based on OWASP Secure by Design.
*)Consult .claude/jit-tooling/security-scanning.md for tool selection per stack.