Menu
Conduct Sprint Review security demonstrations, Green Build reports, and security metrics presentation
Installer avec Codex ou Claude Copiez ce prompt, collez-le dans Codex, Claude ou un autre assistant, puis laissez-le vérifier la page du skill et l'installer pour vous.
Basé sur la classification professionnelle SOC
Run chaos security engineering tests — AI agent attempts to hack the Sprint output and reports findings to the team
Validate Java and TypeScript code against banking naming conventions, style rules, quality standards, and secure coding practices
Perform OWASP Top 10 security assessments, vulnerability scanning, and PCI-DSS compliance checks
Design test strategies including security testing, write test plans, and identify test scenarios for banking features with DevSecOps integration
Perform STRIDE threat modeling during Sprint Planning for new features and APIs
Run UX review checklist for banking user flows, validate WCAG accessibility compliance, assess security UX patterns, and review customer interface design
| name | sprint-security-review |
| description | Conduct Sprint Review security demonstrations, Green Build reports, and security metrics presentation |
Invoke when preparing for Sprint Review to demonstrate security alongside features.
# Sprint [N] — Green Build Report
## Pipeline Status: ✅ ALL PASSED
| Stage | Status | Details |
|-------|--------|---------|
| SAST (SonarQube) | ✅ Pass | 0 High/Critical, 3 Medium (accepted) |
| DAST (OWASP ZAP) | ✅ Pass | 0 High/Critical |
| Dependency Scan (Snyk) | ✅ Pass | 0 Critical CVEs |
| Container Scan | ✅ Pass | Base image up to date |
| Unit Tests | ✅ Pass | 87% coverage |
| Integration Tests | ✅ Pass | 42/42 passing |
## Security Stories Completed
- [BANK-301] Input validation on transfer API — Done
- [BANK-302] Rate limiting on auth endpoints — Done
## Security Metrics
- Mean Time to Remediate (High): 2.3 days
- False Positive Rate: 12% (down from 18%)
- Security Debt: 5 Medium items in backlog