Güvenlik uyarılı skill
Bu skill destructive command içerebilir. Skill detaylarını ve kaynak içeriği incelemeden kurulum yapmayın, kopyalamayın, indirmeyin veya çalıştırmayın. Bilinçli ve kontrollü şekilde kullanın.
Tarayıcı bulguları
highhidden_behavior
securityResmi
Resmi Sağlayıcı Skill'iView repo
Scan code changes for security vulnerabilities using STRIDE threat modeling, validate findings for exploitability, and output structured results for downstream patch generation. Supports PR review, scheduled scans, and full repository audits.
Dosyalar1 dosya
SKILL.md572 satır
Loading editor…
Kurulum
ÖnerilenTek komut — ajanınız otomatik olarak devreye alır.
Kurulum komutunu görmek için yukarıdan bir AI aracı seçin.
veya
Manuel Kurulum
Daha fazla adımDosyayı indirin ve ajanınızın sistem istemine yapıştırın.
Skill detayları
Versiyonv1.0.0
YazarFactory AI
Kategorisecurity
Skill IDFactory-AI/factory-plugins/plugins/security-engineer/skills/security-review
İlgili skill'ler
Agent BrowserBackground knowledge for droid-control workflows -- not invoked directly. Agent-browser driver mechanics for web page and Electron desktop app automation.AutoresearchAutonomous experiment loop for optimization research. Use when the user wants to:
- Optimize a metric through systematic experimentation (ML training loss, test speed, bundle size, build time, etc.)
- Run an automated research loop: try an idea, measure it, keep improvements, revert regressions, repeat
- Set up autoresearch for any codebase with a measurable optimization target
Implements the autoresearch pattern with MAD-based confidence scoring, git branch isolation,
and structured experiment Ban Type AssertionsBan `as` type assertions in a package via the `@typescript-eslint/consistent-type-assertions` lint rule, replacing them with compiler-verified type-safe alternatives. Use when enabling the assertion ban in a new package or fixing violations in an existing one.Browser NavigationAutomate browser interactions for web testing, form filling, screenshots, and data extraction.
Use when the user needs to:
- Navigate websites and interact with web pages
- Fill forms and click buttons
- Take screenshots of web content
- Test web applications
- Extract information from web pages
- Debug frontend issues in the browser
- Monitor console logs and network requests
- Record browser sessions as video
This skill uses agent-browser for comprehensive browser automation.
RECOMMENDATION: DCaptureBackground knowledge for droid-control workflows -- not invoked directly. Recording lifecycle for terminal and browser sessions.Commit Security ScanAnalyze code changes for security vulnerabilities using LLM reasoning and threat model patterns. Use for PR reviews, pre-commit checks, or branch comparisons.