Sécurité
88
break
通过 Bash 调用 BREAK 搜索脚本，查询业务安全风险、规避措施、攻击工具、威胁行为者、术语和案例，并基于关联知识回答安全问题。
Sécurité
secure-software-engineering
Guides agents through security requirements, threat modeling, secure design and implementation, dependency and secrets handling, tenant isolation, code review, and release evidence.
★ 88
GitHub Stars
94
Score de qualité
18
Fichiers
About this Skill
Use when designing or implementing software securely: define security requirements, threat-model a feature, choose secure defaults, design authentication and authorization, handle untrusted data and secrets, evaluate dependencies, design multi-tenant trust boundaries, or review security-sensitive changes. Use for prevention during requirements, design, implementation, and review; not for post-build security assessments or scanning an existing codebase.
Cas d’usage
- Define security requirements and acceptance criteria
- Threat-model features, integrations, and trust boundaries
- Design authentication, authorization, and tenant isolation
- Review security-sensitive code and dependencies
- Prepare release evidence and manage residual risk
Fonctionnalités
- Prevention-oriented security workflow from requirements through release
- Reference guidance for authentication, input handling, secrets, dependencies, logging, and tenant isolation
- Threat-model and secure-code-review templates
- AI and LLM security guidance
- Explicit residual-risk and evidence tracking
Agents compatibles
Skill files
Other
evals/evals.json
JSON
Other
README.md
Markdown
Other
templates/lightweight-threat-model.md
Markdown
Other
templates/secure-code-review-checklist.md
Markdown
Other
templates/security-acceptance-criteria.md
Markdown
Reference
references/ai-llm-security.md
Markdown
Reference
references/authentication-authorization.md
Markdown
Reference
references/dependency-supply-chain.md
Markdown
Reference
references/incident-learning.md
Markdown
Reference
references/input-validation-data-handling.md
Markdown
Reference
references/multi-tenant-isolation.md
Markdown
Reference
references/release-evidence.md
Markdown
Reference
references/secrets-lifecycle.md
Markdown
Reference
references/secure-code-review.md
Markdown
Reference
references/secure-logging-audit.md
Markdown
Reference
references/security-requirements-threat-modeling.md
Markdown
Reference
references/source-index.md
Markdown
SKILL.md
SKILL.md
Markdown
Related Skills
Sécurité
82
wpegpt-analyzer
Automates IDA and the WPeGPT plugin to analyze PE and ELF binaries in light, full, or vulnerability-assessment modes, producing structured reports on purpose, network IoCs, suspic…
Sécurité
96
binary-analysis
Analyzes PE, ELF, Mach-O, and firmware binaries through a deterministic Ghidra-backed CLI for static triage, API mapping, decompilation, call tracing, and evidence-based reporting.
Sécurité
95
privacy-engineering
Translates privacy principles and legal requirements into data-flow maps, lifecycle records, verifiable acceptance criteria, retention and deletion plans, consent controls, and pr…
Sécurité
94
pace-plan
Helps agents design, coordinate, operate, troubleshoot, exercise, and improve authorized Primary, Alternate, Contingency, and Emergency communication plans without inventing local…
Sécurité
92
crowdsec
Deploy and operate CrowdSec, including cscli, log acquisition, detection scenarios, remediation bouncers, AppSec WAF, incident review, and safe configuration changes on Linux or D…
Sécurité
90
security-audit-methodology
Provides a defensive methodology for authorized security reviews covering threat modeling, architecture and dependency analysis, vulnerability classification, and security testing…
Sécurité
88
permission-scope-audit
Audits iOS and macOS projects for over-broad location, photo library, and contacts permissions, recommending narrower or privacy-preserving APIs and reporting file locations and l…