The Agent Skills Directory

[SAFE]: The skill defines a defensive security persona focused on application security, threat modeling, and risk mitigation using established methodologies like STRIDE and OWASP principles.
[SAFE]: Technical deliverables provided as examples (Nginx configurations, CI/CD pipelines, and Python code) follow security best practices, such as using security headers and parameterized validation.
[SAFE]: External references in the CI/CD pipeline examples (Semgrep, Trivy, Gitleaks) point to well-known and reputable GitHub Actions maintained by established security organizations.
[SAFE]: The skill explicitly instructs the agent to treat secrets as first-class concerns, forbidding hardcoded credentials and advocating for secrets management and audit logging.
[SAFE]: Capability access to tools like bash and git is appropriately scoped to the agent's professional function of auditing codebase security and infrastructure configuration.

security-eng