Find security risks in specs against your code.
What it does
Creates a security threat report by reviewing specification documents against source code with AWS Security Agent.
When to use it
Use when reviewing specifications or designs for security risks, security-posture changes, or STRIDE analysis.
How to use it
Give it a project with specification documents to review; it writes a threat report and highlights regressions from the prior design.
What you provide
- An existing project
Uses
AS
Good to know
- cannot be undone: s3://<bucket>
Latest review
What you need · 1
Requires the AWS CLI with the securityagent commands used to create and run threat models.
Access · 3
This skill
s3://<bucket>
Write
Uploads your code and specs (irreversible)
AWS Security Agent
Execute
Starts a threat model job
Write
Creates a hosted threat model
/tmp/source.zip
Write
Saves a temporary workspace archive