Appsec

Name: Appsec
Author: aibot88

ASecurity

Skills para trabalho de AppSec defensivo ponta-a-ponta. Inclui intake, threat modeling, code review, testes de seguranca, correcoes e entrega de relatorios.

4 stars
0 votes
0 copies
3 views
Added September 12, 2026

securitygorailstestingsecurity

Security analysis

A100/100

Pro scans all 2 files and shows the line behind each finding

Scanned September 12, 2026

npx -y skills add aibot88/sec_skill_store --skill appsec --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Appsec?

Add the live security badge to your README. It updates with every re-scan.

[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/aibot88-appsec/badge)](https://www.skillsdirectory.com/skills/aibot88-appsec)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro

SKILL.md

---
name: appsec
description: Skills para trabalho de AppSec defensivo ponta-a-ponta. Inclui intake, threat modeling, code review, testes de seguranca, correcoes e entrega de relatorios.
---

# AppSec Skills Orchestrator

Pacote de skills para conduzir trabalho de AppSec defensivo.

## Skills Incluidas

### Intake (00)
- **intake** - Coletar informacoes do projeto e autodetectar contexto tecnico
- **scope_guardrails** - Definir limites e restricoes do escopo

### Threat Model (10)
- **threat_model_lite** - Modelagem de ameacas simplificada
- **attack_surface_map** - Mapeamento da superficie de ataque

### Review (20)
- **code_review** - Revisao de codigo focada em seguranca
- **dependency_review** - Analise de dependencias vulneraveis
- **secrets_review** - Deteccao de secrets expostos

### Testing (30)
- **sast_baseline** - Analise estatica de seguranca
- **dast_safety** - Testes dinamicos seguros
- **authz_authn_checks** - Verificacao de autenticacao/autorizacao
- **injection_checks** - Testes de injecao
- **business_logic** - Analise de logica de negocios

### Fixes (40)
- **fix_playbook** - Guia de correcao de vulnerabilidades
- **secure_defaults** - Configuracoes seguras padrao

### Validation (50)
- **regression_plan** - Plano de testes de regressao
- **security_gates** - Gates de seguranca

### Delivery (60)
- **report** - Geracao de relatorio final
- **risk_acceptance** - Documentacao de aceitacao de risco
- **handoff** - Entrega e transferencia