Security Hardening Bundle
Layered security: code review, threat modeling, secret scanning, STRIDE analysis, and dangerous-command blocking.
About
A defense-in-depth pack for teams serious about security. Combines AI-powered code review, STRIDE threat modeling, static secret scanning, and the tool-guardian and secrets-scanner hooks that block dangerous operations before they run.
Tags
Included in this bundle (5)
AI Security Code Reviewer
Trace data flows across files to find injection flaws, auth bugs, secrets, and crypto issues with severity ratings.
Threat Model Analyst
Run a STRIDE-based threat modeling pass on your system architecture and surface actionable security findings.
Secret Scanner
Scan files and diffs for accidentally committed secrets across 20+ providers and pattern types.
Secrets Scanner
Pre-commit hook that scans modified files for accidentally leaked secrets and blocks the commit.
Tool Guardian
Intercepts dangerous tool operations (rm -rf, force pushes, DROP DATABASE) before the AI executes them.
Related Plugins
Full-Stack Developer Bundle
Everything a full-stack engineer needs: commits, security review, README, tests, MCP scaffolding, and GitHub integration.
DevOps & Infrastructure Bundle
Terraform analysis, GitHub Actions generation, Docker multi-stage files, and auto-commit hooks.
# Install all skills in this bundle: curl -fsSL "https://raw.githubusercontent.com/github/awesome-copilot/main/skills/security-review/SKILL.md" -o ~/.claude/commands/security-review.md 2>/dev/null || true curl -fsSL "https://raw.githubusercontent.com/github/awesome-copilot/main/skills/threat-model-analyst/SKILL.md" -o ~/.claude/commands/threat-model-analyst.md 2>/dev/null || true curl -fsSL "https://raw.githubusercontent.com/github/awesome-copilot/main/skills/secret-scanning/SKILL.md" -o ~/.claude/commands/secret-scanning.md 2>/dev/null || true curl -fsSL "https://raw.githubusercontent.com/github/awesome-copilot/main/skills/codeql/SKILL.md" -o ~/.claude/commands/codeql.md 2>/dev/null || true curl -fsSL "https://raw.githubusercontent.com/github/awesome-copilot/main/skills/secrets-scanner/SKILL.md" -o ~/.claude/commands/secrets-scanner.md 2>/dev/null || true curl -fsSL "https://raw.githubusercontent.com/github/awesome-copilot/main/skills/tool-guardian/SKILL.md" -o ~/.claude/commands/tool-guardian.md 2>/dev/null || true
CustomAgent.app
@customagent-app