security-review
Security vulnerability assessment identifying OWASP risks, injection vectors, authentication issues, and data exposure with severity classification.
Datos de origen
- Repositorio
- a5c-ai/babysitter
- Última actividad en el origen
- 1 de junio de 2026 a las 07:46
- Idioma detectado de SKILL.md
- inglés
- Estrellas
- 1832
- Forks
- 113
Opciones de instalación
De forma predeterminada está seleccionado el prompt que primero revisa el origen. Puedes cambiar a un comando directo o descargar una copia local.
Revisa los archivos de origen
Lee SKILL.md y los archivos complementarios que muestra SkillsMP antes de decidir si quieres instalarlo.
Explorador de archivos
2 archivosMostrando SKILL.md
SKILL.md
Instrucciones de origen · Vista previa de solo lectura- name
- security-review
- description
- Security vulnerability assessment identifying OWASP risks, injection vectors, authentication issues, and data exposure with severity classification.
- allowed-tools
- Read, Bash, Grep, Glob, Agent, AskUserQuestion
- graph
- {"domains":["domain:software-engineering"],"skillAreas":["skill-area:agentic-loops","skill-area:orchestration-loop"],"workflows":["workflow:feature-development"],"topics":["topic:developer-experience"],"roles":["role:tech-lead","role:backend-engineer"]}
- Before any code merge involving user-facing changes
- As part of the /review-security command
- Mandatory for high-stakes implementations
## Process
1. Identify modified files with security relevance
2. Scan for common vulnerability patterns
3. Assess authentication and authorization changes
4. Check for data exposure risks
5. Evaluate dependency security
6. Classify severity and provide recommendations
## Severity Levels
- **Critical**: Immediate exploitation risk
- **High**: Significant vulnerability requiring fix before merge
- **Medium**: Vulnerability that should be addressed soon
- **Low**: Minor security improvement opportunity
## Key Rules
- Security review failure halts implementation
- All findings must include file paths and line numbers
- Provide actionable remediation steps
- Reference OWASP categories where applicable
## Tool Use
Invoke via babysitter process: `methodologies/rpikit/rpikit-review`
Ver en GitHub