Audit code diffs against OWASP categories and leakage patterns.
npx skills add https://github.com/mozilla/fxa --skill fxa-security-review
Please help me install this Agent Skill. Skill: fxa-security-review Source: https://github.com/mozilla/fxa/tree/main/.claude/skills/fxa-security-review Command: npx skills add https://github.com/mozilla/fxa --skill fxa-security-review
Identify and mitigate security risks in code changes by auditing diffs for vulnerabilities before merge.
Review the current diff (git diff main...HEAD) and produce a prioritized security remediation plan.
High-intent search queries and answers about installing and using this skill.
Auditing code diffs for security vulnerabilities involves reviewing changes against OWASP categories and leakage patterns to surface risks like secrets, insecure crypto, and misconfigurations, producing a prioritized remediation plan.
Threat modeling for code changes is the process of identifying and documenting security risks in authentication, authorization, and data handling paths, needed when changes touch security-sensitive areas across web, mobile, or backend services.
Yes, secrets leakage and insecure crypto can be detected in a git diff by auditing the changed code for data exposure patterns and OWASP categories, along with configuration and build artifacts.
Diff-focused security review works across web, mobile, and backend services by auditing changes touching authentication, authorization, data handling, and security-sensitive paths for misconfigurations and logging gaps.
The best way to review a pull request for OWASP risks is auditing the code diff against vulnerability categories and leakage patterns, then producing a prioritized security remediation plan before deployment.
iani-kuliAnalyze git branch diffs for security vulnerabilities and code quality defects.
nnexaiAnalyze source code changes for bugs, security vulnerabilities, and quality issues.
sevenbelowllcAutomate threat modeling, security auditing, and penetration testing for applications.
qazuorPerform security audits covering OWASP Top 10, threat modeling, and code review.
