All authors
Claude Skills by joaovicdev
github.com/joaovicdev6 skills0 installs13 views
- Api Secure ReportFull security inventory of every HTTP route in a backend project — each route marked clean or carrying findings, with the exploitation path and the mitigation, written in the user's language (pt-BR by default). Use when the user runs /api-secure-report, or asks for a security report, audit or inventory of the project's APIs.Votes: 0GitHub stars: 2
- Secure CodingLanguage-agnostic OWASP Top 10:2025 rules for writing and reviewing backend/API code, plus per-stack idiom files for NestJS, Laravel and Spring Boot. Use before writing or modifying any route handler, controller, guard/policy, query, auth flow, app config, or dependency — in any language. Also use when the user asks what security guidance applies, or asks to check code against OWASP.Votes: 0GitHub stars: 2
- App Stride ReportSTRIDE threat model of the project under review — system decomposition, a data-flow diagram with trust boundaries, and every threat per element with its attack path, current status and mitigation, written in the user's language (pt-BR by default). Use when the user runs /app-stride-report, or asks for a threat model, STRIDE analysis, attack surface review, or an assessment of the project's trust boundaries.Votes: 0GitHub stars: 2
- Appsec ProfileArchitecture profile of the project under review — the module map, the trust-boundary names, where the guard is, how tenancy is applied, what is public by declaration, and where validation, error handling, configuration and the test harness live — written to appsec/profile.md as claims every later run reads instead of re-deriving. Use when the user runs /appsec-profile, or asks to record or refresh the project's security architecture so the other commands stop reporting controls that already ...Votes: 0GitHub stars: 2
- Appsec TestTurns one security finding into the test that proves it — a failing test in the project's own framework, written where the project keeps its tests, then optionally the minimal fix that turns it green. Written in the user's language (pt-BR by default). Use when the user runs /appsec-test, or asks to prove, reproduce, regression-test or fix a specific security finding or threat.Votes: 0GitHub stars: 2
- Pr Appsec ReviewSecurity review of a pull request in two independent halves — OWASP Top 10:2025 findings on the changed code, and STRIDE threats on the trust boundaries the change touches — each item marked as introduced by this change or pre-existing, written in the user's language (pt-BR by default). Use when the user runs /pr-appsec-review, or asks to review a PR, a diff, or a branch for security risk.Votes: 0GitHub stars: 2