What problem does it solve? Security issues in pull requests, configuration files, and dependencies are often missed or buried under scanner false positives. This Skill performs evidence-driven application security reviews that trace data flow from inputs to dangerous operations, verify exploitability, and produce actionable remediation plans. ## Core Features & Use Cases - Evidence-Based Vulnerability Review: Traces data flow from entry points to dangerous sinks across PRs, diffs, source code, IaC, APIs, and lockfiles, separating confirmed findings from false positives. - SAST/SCA/SARIF Result Triage: Re-validates scanner output against actual code paths, deduplicates root causes, and re-grades severity based on reachability and real impact. - Financial System Hardening Checks: Applies specialized checks for transaction integrity, replay protection, Maker-Checker bypass, and BOLA/IDOR in banking and fintech APIs. - Use Case: Before merging a login PR, ask for a security review; the Skill scopes the diff, checks authentication, session, and injection risks, and returns a report distinguishing confirmed vulnerabilities from hardening suggestions without auto-applying patches. ## Quick Start Ask the AI to review your current pull request or code diff for security vulnerabilities such as injection, authentication flaws, and exposed secrets, and produce a severity-graded report with remediation steps.
