appsec-skills

Plugin appsec-skills from marketplace appsec-untangled in mohamed-osama-aboelkheir/appsec-untangled-resources. Commands read from the repo's manifest — 7 days ago.

Skills (6)

• code-walkthrough

  Explain how a feature or a code location works as a numbered walkthrough: a Mermaid sequence diagram (UI → HTTP → app → route → auth → controller → service → store → database) and a matching VS Code CodeTour whose steps highlight the exact code, with real request/response and error examples. Starts

• secure-code-review

  Threat-model-first security code review of a pull request, commit or diff. Builds the story of the change, lists entry points and dangerous sinks, picks the relevant threats from the AppSec Untangled wiki, checks each mitigation against the code, and writes Markdown and HTML reports with evidence. U

• security-experiment

  Build a short, runnable notebook that shows why a security control makes a sink safe (or why its absence doesn't): one classic payload goes through the application's real steps, first without the control, then with it, printing the value after every step with the dangerous part highlighted, until th

• semgrep-triage

  Triage Semgrep (or other SAST) findings: for each finding, trace the flagged value back to its sources, check the controls on the path against the AppSec Untangled wiki, and decide true or false positive, severity (impact × likelihood) and confidence. False positives get a decision on whether to dis

• source-to-sink

  Trace how data flows between sources and dangerous sinks, like a SAST dataflow trace, and explain it as a diagram of code cards plus a VS Code CodeTour that highlights the value on every line. Backward mode starts from a sink (a file:line, or a Semgrep/SAST finding) and finds every source that reach

• threat-model

  Builds a threat model with the Doors, Windows & Holes method from the AppSec Untangled wiki, for a design doc, a feature description, an architecture or a repository. Writes the problem and stories, answers the template's scope questions, groups doors (entry points), windows (hidden entry points) an