qa-security

What problem does it solve?

This Skill acts as a vigilant guardian, scanning code changes for security vulnerabilities, prompt injection risks, and data exposure, ensuring the integrity and safety of the codebase.

Core Features & Use Cases

• OWASP Top 10 Analysis: Detects vulnerabilities across all major OWASP categories.
• Prompt Injection Detection: Identifies malicious instructions or payloads targeting AI models within code, comments, and strings.
• Data Exposure Checks: Flags instances of sensitive data leakage, PII in logs, or insecure handling of credentials.
• Veto Power: Can halt the review process with a "BLOCKER" finding for critical security flaws.
• Use Case: Before merging a new feature that handles user authentication, this Skill would meticulously check for broken access control, weak authentication mechanisms, and potential injection vectors, preventing security breaches.

Quick Start

Use the qa-security skill to analyze the staged code changes for any security vulnerabilities.