| name | secure-change-review |
| description | Use for security-sensitive code, external input, authentication, authorization, APIs, uploads, webhooks, secrets, cryptography, dependencies, infrastructure, or pre-merge security review. |
Secure Change Review Skill
Workflow
- Identify assets, actors, entry points, trust boundaries, privileges, and sensitive data.
- Define the security invariants that must remain true.
- Trace untrusted data to every sink and verify canonicalization, validation, authorization, and output encoding.
- Verify server-side object/action authorization and tenant isolation.
- Review authentication/session lifecycle, replay, CSRF, idempotency, and audit logging.
- Review injection, SSRF, traversal, unsafe parsing/deserialization, file handling, redirects, and denial-of-service bounds.
- Review secret use, logging/redaction, cryptographic purpose separation, rotation, and failure behavior.
- Inspect dependency and lockfile changes, install scripts, generated code, CI identities, containers, and IaC.
- Add adversarial and negative tests.
- Run available secret, SAST, SCA, license, container, IaC, and test gates.
Output
Produce a ranked finding table with evidence, exploit preconditions, impact, remediation, regression test, and residual risk. Never infer a clean scan that was not run.
