mbuyco/security-review
opencode/skills/security-review/SKILL.md
Provides structured security analysis and threat modeling for given systems or outputs, integrating common threat categories and secure defaults. Use when evaluating or generating designs/code that require security confidence.
development
Updated Apr 21, 2026
$ install --global
skillsauthnpx skillsauth add mbuyco/dotfiles security-reviewInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 30, 2026, 12:33 PM4.0s1 file scanned
SKILL.md
- name:
- security-review
- description:
- Provides structured security analysis and threat modeling for given systems or outputs, integrating common threat categories and secure defaults. Use when evaluating or generating designs/code that require security confidence.
- license:
- Apache-2.0
- category:
- security
- version:
- 1.0
- allowed-tools:
- Read
Security Review Skill
Overview
Helps the agent perform systematic security evaluations using recognized threat analysis patterns (e.g., STRIDE), secure defaults, and threat mitigation recommendations.
When to use
- Code, design, or interface evaluations
- Threat modeling
- Security hardening guidance
- Detecting insecure dependencies or misconfigurations
Instructions
- Identify assets and trust boundaries.
- Enumerate threat categories (injection, elevation, exfiltration, misuse).
- For each threat, provide impact, likelihood, and proposed mitigations.
- Highlight secure defaults and configuration best practices.
- Call out specific code or design patterns with high risk.
Example
Input: “Evaluate the REST API design for authentication and session management.”
Output:
- Identified risks
- Threat analysis table
- Best practice recommendations
Edge Cases
- Legacy systems with limited security controls
- Highly permissioned environments
Related Skills
mbuyco/opencode/skills/vim-reaper
development
VerifiedTrustedCommunity
# SKILL.md ## Name VimReaper ## Description VimReaper is a dead‑code cleanup skill that systematically scans a codebase to identify and safely remove unused code—dead functions, unreachable blocks, obsolete variables, redundant imports, and leftover comments—while preserving the intended logic and test suite. As its name suggests, VimReaper wields the **vim editor** as its primary scalpel: code removal is performed using vim’s precise ex commands, search patterns, and scripted editing modes, m
SKILL.mdUpdated May 30, 2026
mbuyco/tdd
development
VerifiedTrustedCommunity
Test-driven development with red-green-refactor loop. Use when user wants to build features or fix bugs using TDD, mentions "red-green-refactor", wants integration tests, or asks for test-first development.
SKILL.mdUpdated May 4, 2026
mbuyco/improve-codebase-architecture
development
VerifiedTrustedCommunity
Find deepening opportunities in a codebase, informed by the domain language in CONTEXT.md and the decisions in docs/adr/. Use when the user wants to improve architecture, find refactoring opportunities, consolidate tightly-coupled modules, or make a codebase more testable and AI-navigable.
SKILL.mdUpdated May 4, 2026
mbuyco/grill-me
testing
VerifiedTrustedCommunity
Interview the user relentlessly about a plan or design until reaching shared understanding, resolving each branch of the decision tree. Use when user wants to stress-test a plan, get grilled on their design, or mentions "grill me".
SKILL.mdUpdated May 4, 2026