RedHatProductSecurity/prodsec-skills
Skill Claude CodeCodex
Enforce database security for schema design, access control, encryption, and operational hardening. Use when building, reviewing, or auditing database schemas, connection handling, credential management, or database deployment configuration.
RedHatProductSecurity/prodsec-skills
Skill Claude CodeCodex
Apply defense-in-depth by layering multiple independent security controls. Use when reviewing system architecture, evaluating whether a single control is the only barrier, or assessing blast radius of a component compromise.
RedHatProductSecurity/prodsec-skills
Skill Claude CodeCodex
Creates devcontainers with language-specific tooling (Python/Node/Rust/Go) and persistent volumes. Use when adding devcontainer support to a project or setting up isolated development environments.
RedHatProductSecurity/prodsec-skills
Skill Claude CodeCodex
Performs security-focused differential review of code changes (PRs, commits, diffs). Adapts analysis depth to codebase size, uses git history for context, calculates blast radius, checks test coverage, and generates comprehensive markdown reports. Automatically detects and prevents security regressions.
RedHatProductSecurity/prodsec-skills
Skill Claude CodeCodex
Enforce authorization server metadata discovery for MCP ecosystems. Use when configuring or reviewing authorization server endpoint publication and discovery metadata.
RedHatProductSecurity/prodsec-skills
Skill Claude CodeCodex
Enforce support for OAuth 2.0 and OIDC discovery mechanisms in MCP clients. Use when building, configuring, or reviewing MCP client authentication and authorization server discovery.
RedHatProductSecurity/prodsec-skills
Skill Claude CodeCodex
Support OAuth 2.0 Dynamic Client Registration in authorization servers. Use when building or reviewing authorization server client management for MCP ecosystems.
RedHatProductSecurity/prodsec-skills
Skill Claude CodeCodex
Enforce encrypted communication with external data sources. Use when designing, configuring, or reviewing network connections between AI systems and external databases, APIs, or data services.
RedHatProductSecurity/prodsec-skills
Skill Claude CodeCodex
Enforce MCP server integration with external centralized identity providers. Use when building, configuring, or reviewing MCP server authentication against external IdPs like Keycloak.
RedHatProductSecurity/prodsec-skills
Skill Claude CodeCodex
Apply when reviewing or writing code that accepts file uploads, processes user-supplied files, or serves stored files. Covers extension validation, content verification, filename security, storage isolation, and scanning.
RedHatProductSecurity/prodsec-skills
Skill Claude CodeCodex
Protect LLM model files against unauthorized access and modification. Use when designing, deploying, or reviewing storage and access controls for AI model files and weights.
RedHatProductSecurity/prodsec-skills
Skill Claude CodeCodex
Enforce FIPS 140-2/140-3 compliance for RHEL, OpenShift, and Go workloads. Use when building, configuring, reviewing, or auditing systems that require FIPS-validated cryptographic modules, RHEL crypto-policy enforcement, FIPS-ready Go binaries, or FIPS-mode kernel and cluster configuration.
Cursor rule Cursor
How to run tests in the OSIDB project.
RedHatProductSecurity/agentic-threat-modeling
Agent
Threat analysis subagent with a security engineer mindset. Used for parallel analysis of components or framework categories.
RedHatProductSecurity/agentic-threat-modeling
Command
Share feedback on a generated threat model by filing a GitHub issue.
RedHatProductSecurity/agentic-threat-modeling
Command
Quick non-interactive threat assessment using STRIDE. Scans the current repo and produces a full threat model without asking questions.
RedHatProductSecurity/agentic-threat-modeling
Command
Review an existing THREATMODEL.md against the current code state. Identifies drift, stale threats, and new attack surface.
RedHatProductSecurity/agentic-threat-modeling
Command
Generate a threat model for the current project or a specific target. Supports multiple frameworks and threat actor perspectives.
RedHatProductSecurity/agentic-threat-modeling
Skill Claude CodeCodex
Core threat analysis engine. Takes a system context profile and applies one or more threat modeling frameworks (STRIDE, PASTA, LINDDUN, VAST, Attack Trees, OCTAVE) with automatic threat actor profiling.
RedHatProductSecurity/agentic-threat-modeling
Skill Claude CodeCodex
Discovers system context for threat modeling through code analysis and/or user interview. Produces a structured system profile covering components, data flows, trust boundaries, assets, and entry points.
RedHatProductSecurity/agentic-threat-modeling
Skill Claude CodeCodex
Generates the final threat model deliverable. Produces a narrative THREATMODEL.md report.
RedHatProductSecurity/agentic-threat-modeling
Skill Claude CodeCodex
Reviews an existing THREATMODEL.md against the current codebase. Identifies stale threats, new attack surface, drift from assumptions, and unimplemented mitigations.
RedHatProductSecurity/agentic-threat-modeling
Skill Claude CodeCodex
Main dispatcher for threat modeling. Routes to discover, analyze, and report sub-skills based on user intent. Supports multiple frameworks (STRIDE, PASTA, LINDDUN, VAST, Attack Trees, OCTAVE) and automatic threat actor profiling.