security
Installation
SKILL.md
Security Skill
Two modes: diff review (scan current git changes for vulnerabilities) and threat model (audit a system's full attack surface). Load the reference for the mode the request matches.
Reference Loading Table
| Signal | Load | Why |
|---|---|---|
| Review git changes, scan a diff, check for vulnerabilities | references/coverage.md |
40 vulnerability classes for LLM-depth review of changed code |
| Threat model, attack surface, supply-chain audit, deny list, security posture | references/threat-model.md |
5-phase threat model workflow with deterministic scripts and artifact gates |
Default Mode: Diff Review
When the request is about reviewing changes (not a full threat model), run the diff review directly. This is the common case.