DFMDemoV2 security-review

Skill: security-review

install
source · Clone the upstream repo
git clone https://github.com/davidrrowley/DFMDemoV2
manifest: agents/skills/security-review/skill.md
source content

Skill: security-review

## Intent
Perform a lightweight security review on a change, focusing on threat surfaces and mitigations.

## Inputs
- architecture context
  • change description/diff

    Outputs

    • risks
  • mitigations

  • checks to run

    Process

    1. Identify assets and trust boundaries.
  1. Identify threats.

  2. Check controls.

  3. Define validations.

  4. Escalate if needed.

    Quality bar

    Risks are credible and mitigations are practical and testable.

    Escalation triggers

    Sensitive data, auth changes, new external integrations.