secrets-and-logging-hygiene
Workflow for preventing secret leaks and sensitive logging (PII/credentials) and adding redaction defaults.
input-validation-hardening
Process for tightening input validation, canonicalization, and safe parsing to prevent injection and logic abuse.
threat-model-lite
Lightweight, repeatable threat modeling for a feature or service with prioritized mitigations.
markdown-customizations
Use this skill when creating or editing GitHub Copilot customization Markdown files (agent profiles, prompt files, instruction files, and skills).
secure-code-review
Repeatable process for an application security code review that produces prioritized findings and fix guidance.
authn-authz-review
Workflow to review authentication and authorization flows (sessions, tokens, RBAC/ABAC) and produce fix guidance.
secure-fix-validation
Standard validation checklist to prove a security fix works and doesn’t regress behavior.
genai-acceptance-review
Review workflow for AI/LLM output usage to prevent over-trust, injection, and unsafe automation.