Security Review
codexstar69/bug-hunter/skills/security-reviewby codexstar693be69733a27aa04d4f5620df203c05350d162067No license519 starsListed Oct 9, 2026Updated Oct 9, 2026Repository updated 7 weeks ago
Run a focused STRIDE-based security review using Bug Hunter-native artifacts. Use whenever the user asks for a full security audit, repository security review, weekly security scan, PR security review with deeper validation, or wants dependency CVEs and threat-model context combined into one workflow.
- 3be69733a27aa04d4f5620df203c05350d162067Currentcommit 3be6973Published Oct 9, 2026
Source and attribution
Source:codexstar69/bug-hunterinskills/security-reviewat commit3be6973
License: No license
Content belongs to its original authors. SourceWeft indexes it from a public repository.
More from codexstar69/bug-hunter
Vulnerability Validation
codexstar69
Validates suspected security findings for reachability, exploitability and real-world impact, producing CVSS scores and proof-of-concept notes.
Threat Model Generation
codexstar69
Generates a STRIDE-based threat model and matching security config for a repository under .bug-hunter/.
Skeptic
codexstar69
Adversarially reviews reported bugs to confirm or dismiss them as false positives, writing a JSON verdict file.
Referee
codexstar69
Final arbiter that independently verifies bug-hunter findings and skeptic challenges, issuing verdicts with severity and security enrichment.
Recon
codexstar69
Maps a codebase's architecture and risk areas to guide bug hunting, without finding bugs itself.
Hunter
codexstar69
Multi-phase behavioral code analysis agent that finds logic errors, security vulnerabilities, race conditions and runtime bugs.
More in Security
Kyc Rules
anthropics
Applies a firm's KYC/AML rules grid to a parsed onboarding record, scoring risk and routing outcomes.
Kyc Rules
anthropics
Applies a firm's KYC/AML rules grid to a parsed onboarding record, scoring risk and routing outcomes.
Compliance Tracking
anthropics
Tracks compliance requirements, audit readiness, and evidence for frameworks such as SOC 2, ISO 27001, GDPR, HIPAA, and PCI DSS.
Google Cloud Scc Remediation
Guides remediation of Google Cloud Security Command Center findings with consent-gated plans and reference playbooks.
Google Cloud Recipe Auth
Guides authentication and authorization to Google Cloud services and APIs for users, service accounts, and workloads.
Dpop Adoption
Guides implementation of OAuth 2.0 DPoP (RFC 9449) sender-constrained refresh tokens for Google's OAuth platform.