security

Identify and remediate security vulnerabilities across codebases with zero-trust workflows.

2|1|Updated Mar 8, 2026
One-click install
npx skills add https://github.com/duggal1/Sapphire-cli --skill security-duggal1
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security
Source: https://github.com/duggal1/Sapphire-cli/tree/main/internal/skills/bundled/security
Command: npx skills add https://github.com/duggal1/Sapphire-cli --skill security-duggal1

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill enables security teams and developers to identify, isolate, and remediate vulnerabilities with a zero-trust mindset across codebases and deployments.

Core Features & Use Cases

  • Threat modeling and risk assessment to map attack paths and controls.
  • End-to-end vulnerability verification, remediation design, and secure implementation across the full software life cycle.
  • Documentation and post-fix validation to ensure remediation holds under real-world conditions.

Quick Start

Initiate a threat-modeling and vulnerability verification workflow against your codebase to begin secure remediation.

Frequently Asked Questions about security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I remediate security vulnerabilities with surgical precision in my codebase?▼

Threat modeling maps potential attack paths and evaluates existing controls to assess risk. By applying a zero-trust mindset, it identifies vulnerabilities across codebases and deployments to guide secure remediation workflows.

How do I verify that a security remediation holds under real-world conditions?▼

Post-fix validation verifies remediation by testing the secure implementation against real-world conditions. It requires full tool-chain verification and web-search-backed advisories to ensure the vulnerability containment actually holds.

What strict security controls do I need to implement for secure code remediation?▼

Secure code remediation requires implementing Zod-based input validation, parameterized queries, and environment-variable secrets. It also demands minimal error detail exposure to prevent information leakage during vulnerability containment.

Does this vulnerability remediation workflow support penetration testing and risk assessment?▼

Yes, the workflow supports penetration testing and risk assessment to identify and isolate vulnerabilities. It integrates end-to-end vulnerability verification and remediation design across the full software life cycle.