skills.rest
kreuzberg-dev
kreuzberg-devOFFICIAL
Explore all skills by this author →
WebsiteGitHub

security-and-vulnerability-management

Audit dependencies, fuzz public APIs, and enforce unsafe block practices.

836|66|Updated Feb 3, 2025
Search Tags:#code review#security#vulnerability#dependency management#rust#fuzzing
One-click install
npx skills add https://github.com/kreuzberg-dev/html-to-markdown --skill security-and-vulnerability-management
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-and-vulnerability-management
Source: https://github.com/kreuzberg-dev/html-to-markdown/tree/main/.codex/skills/security-and-vulnerability-management
Command: npx skills add https://github.com/kreuzberg-dev/html-to-markdown --skill security-and-vulnerability-management

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill provides a comprehensive framework for identifying and mitigating security vulnerabilities within software projects, ensuring code integrity and dependency safety.

Core Features & Use Cases

  • Dependency Auditing: Automatically checks for known vulnerabilities in project dependencies using tools like cargo audit and cargo deny.
  • Fuzzing: Implements fuzz testing to uncover unexpected crashes and security flaws in public APIs.
  • Unsafe Code Management: Enforces strict documentation and review practices for all unsafe code blocks.
  • Security Testing: Guides developers to avoid panics on untrusted input and to test adversarial scenarios.
  • Use Case: Before releasing a new version of a Rust crate, run this Skill to ensure all dependencies are secure, unsafe blocks are properly documented, and the code is resilient to malformed inputs.

Quick Start

Run a full security audit of the current project using the security-and-vulnerability-management skill.

Frequently Asked Questions about security-and-vulnerability-management

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit Rust dependencies for known vulnerabilities before release?▼

Audit Rust dependencies for vulnerabilities by running automated checks using cargo audit and cargo deny to identify known security risks in project dependencies before release.

What is the best way to fuzz test Rust public APIs for unexpected crashes?▼

Fuzz test Rust public APIs for crashes by implementing fuzzing techniques that expose unexpected crashes and security flaws in public API boundaries.

How do you enforce safe coding practices for unsafe blocks in Rust?▼

Enforce safe coding practices for Rust unsafe blocks by applying strict documentation and review requirements to all unsafe code blocks to mitigate security risks.

Does this vulnerability management framework help test adversarial scenarios on untrusted input?▼

Yes, this vulnerability management framework tests adversarial scenarios by guiding developers to avoid panics on untrusted input and to test adversarial conditions for robust security.

When do I need a comprehensive security audit for my Rust crate?▼

You need a comprehensive security audit for your Rust crate before releasing a new version to ensure dependencies are secure, unsafe blocks are documented, and code is resilient to malformed inputs.

Related Skills

Explore More Software Engineering Skills→
n4igmen4igme

vuln-memory

Detect memory-safety vulnerabilities in C/C++/Rust native code and append findings to vulnerabilities.md.

Community
Advanced
PostalocityPostalocity
1

framework-compliance-audit

Automate framework compliance audits and generate validation reports.

Official
Advanced
linenoizelinenoize
1

guardian

Scan changed files for secrets, injection flaws, and destructive commands.

Community
Advanced
j0KZj0KZ

security-scanner

Scan JavaScript/TypeScript codebases for OWASP Top 10 risks and secrets.

Community
Advanced