security-and-vulnerability-management

What problem does it solve?

This Skill provides a comprehensive framework for identifying and mitigating security vulnerabilities within software projects, ensuring code integrity and dependency safety.

Core Features & Use Cases

• Dependency Auditing: Automatically checks for known vulnerabilities in project dependencies using tools like cargo audit and cargo deny.
• Fuzzing: Implements fuzz testing to uncover unexpected crashes and security flaws in public APIs.
• Unsafe Code Management: Enforces strict documentation and review practices for all unsafe code blocks.
• Security Testing: Guides developers to avoid panics on untrusted input and to test adversarial scenarios.
• Use Case: Before releasing a new version of a Rust crate, run this Skill to ensure all dependencies are secure, unsafe blocks are properly documented, and the code is resilient to malformed inputs.

Quick Start

Run a full security audit of the current project using the security-and-vulnerability-management skill.