Loading...
Loading...
Found 3 Skills
Scan code changes for security vulnerabilities using STRIDE threat modeling, validate findings for exploitability, and output structured results for downstream patch generation. Supports PR review, scheduled scans, and full repository audits.
Run a comprehensive security review on code
Audits a third-party or freshly cloned repo before install or run for install hooks, auto-run files, CVEs, typosquats, and malicious code, graded A-F with a safe-to-run verdict. Use when the user says "is this repo safe to run?", or when asked whether a clone is safe to run, or to audit or scan a third-party repo. Not for security review of a diff or PR; use reviewing-security.