Security review

Skill jukrap/ai-agent-playbook/skills/security/security-review

Reusable AI agent skills, project templates, and guardrails for safer software maintenance and delivery.

Install

npx -y skills add jukrap/ai-agent-playbook --skill security-review

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

One thing to look at

2 stars2 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.

What its author says it does

Copied from the file, not written here

Use when reviewing secrets, authentication, authorization, input validation, dependency risk, sensitive data flow, or threat-model changes.

SKILL.md

1.2 KB, as published. Nobody here has run it

Security Review

Use this as the primary security skill for development-time risk review.

Workflow

Define scope, assets, actors, trust boundaries, and sensitive data.
Check authn, authz, input validation, output encoding, secrets, logging, transport, and dependency exposure.
Prefer concrete exploit paths and regression tests over generic warnings.
Record risk level, mitigation, residual risk, and verification evidence.

Reference

Read references/security-review-protocol.md for risk classification, data-flow review, evidence, and mitigation notes.

Read references/threat-model-data-exposure.md when sensitive data, tenant boundaries, exports, logs, cache, analytics, or AI/tool context may expose information.

Read references/secrets-credential-boundary.md when credentials, API keys, tokens, env vars, OAuth apps, CI secrets, or provider configs are touched.