trust-boundary-security-review

Reviews application and cloud changes through concrete trust boundaries — authentication, authorization, input and upload handling, secrets, SQL, XSS, CSRF, sessions, rate limits, payments and wallet-signature proofs, dependencies, plus IAM, network, logging, CI and backup controls — and verifies each finding with a negative case. Use when the user asks to "review this code for security issues", "audit our auth or input handling", "check IAM and secrets configuration", "is this upload endpoint safe", or "security review before we deploy". Not for compliance certification, live incident response or attack simulation, or unapproved remediation such as installing packages, rotating credentials, or applying infrastructure changes.

Version

v1.0.0

Size

22 KB

Updated

2026-10-03

Your client verifies the signature before reading. This explicit manual read is available on every plan. Free automatically loads five chosen skills; paid plans automatically load relevant skills across the library.