Security-flagged skill
This skill may contain destructive commands. Do not install, copy, download, or run it before reviewing the skill details and source. Use it deliberately and only in contexts you understand.
Scanner findings
highhidden_behavior
securityOfficial
Official Provider SkillView repo
Scan code changes for security vulnerabilities using STRIDE threat modeling, validate findings for exploitability, and output structured results for downstream patch generation. Supports PR review, scheduled scans, and full repository audits.
Files1 files
SKILL.md572 lines
Loading editor…
Install
RecommendedOne command — your agent picks it up automatically.
Select an AI agent above to see the install command.
or
Manual Install
More stepsDownload the file and paste it into your agent's system prompt.
Skill details
Versionv1.0.0
AuthorFactory AI
Categorysecurity
Skill IDFactory-AI/factory-plugins/plugins/security-engineer/skills/security-review
Related skills
Agent BrowserBackground knowledge for droid-control workflows -- not invoked directly. Agent-browser driver mechanics for web page and Electron desktop app automation.AutoresearchAutonomous experiment loop for optimization research. Use when the user wants to:
- Optimize a metric through systematic experimentation (ML training loss, test speed, bundle size, build time, etc.)
- Run an automated research loop: try an idea, measure it, keep improvements, revert regressions, repeat
- Set up autoresearch for any codebase with a measurable optimization target
Implements the autoresearch pattern with MAD-based confidence scoring, git branch isolation,
and structured experiment Ban Type AssertionsBan `as` type assertions in a package via the `@typescript-eslint/consistent-type-assertions` lint rule, replacing them with compiler-verified type-safe alternatives. Use when enabling the assertion ban in a new package or fixing violations in an existing one.Browser NavigationAutomate browser interactions for web testing, form filling, screenshots, and data extraction.
Use when the user needs to:
- Navigate websites and interact with web pages
- Fill forms and click buttons
- Take screenshots of web content
- Test web applications
- Extract information from web pages
- Debug frontend issues in the browser
- Monitor console logs and network requests
- Record browser sessions as video
This skill uses agent-browser for comprehensive browser automation.
RECOMMENDATION: DCaptureBackground knowledge for droid-control workflows -- not invoked directly. Recording lifecycle for terminal and browser sessions.Commit Security ScanAnalyze code changes for security vulnerabilities using LLM reasoning and threat model patterns. Use for PR reviews, pre-commit checks, or branch comparisons.