Robotti-io

Robotti-io/copilot-security-instructions

Agent Claude Code

Triage and explain application security risks. Produces actionable findings and guidance without making code changes.

Robotti-io/copilot-security-instructions

Agent Claude Code

Designs secure architectures and guardrails. Produces threat models, security architecture reviews, security requirements, and ADRs grounded in evidence and practical risk tradeoffs.

Robotti-io/copilot-security-instructions

Agent Claude Code

Fixes application security issues end-to-end root-cause analysis, code changes, tests, and safe-by-default patterns.

Robotti-io/copilot-security-instructions

Agent Claude Code

Entry-point AppSec router that standardizes intake, delegates to specialist agents, and synthesizes evidence-first outputs.

Robotti-io/copilot-security-instructions

Agent Claude Code

Designs secure architectures and guardrails. Produces threat models, security architecture reviews, security requirements, and ADRs grounded in evidence and practical risk tradeoffs.

Robotti-io/copilot-security-instructions

Skill Claude CodeCodex

Analyze repository-grounded identity, access control, and authorization design with evidence-first reporting and script-validated Mermaid diagrams.

Robotti-io/copilot-security-instructions

Skill Claude CodeCodex

Triage a dependency CVE using local repo evidence and remediation guidance.

Robotti-io/copilot-security-instructions

Skill Claude CodeCodex

Threat model a system, feature, service, or PR using Shostack's 4Q workflow, evidence-first analysis, risk scoring, and CLI-friendly Mermaid helper scripts.

Robotti-io/copilot-security-instructions

Skill Claude CodeCodex

Review workflow for AI/LLM output usage to prevent over-trust, injection, and unsafe automation.

Robotti-io/copilot-security-instructions

Skill Claude CodeCodex

Process for tightening input validation, canonicalization, and safe parsing to prevent injection and logic abuse.

Robotti-io/copilot-security-instructions

Skill Claude CodeCodex

Workflow for preventing secret leaks and sensitive logging (PII/credentials) and adding redaction defaults.

Robotti-io/copilot-security-instructions

Skill Claude CodeCodex

Repeatable process for an application security code review that produces prioritized findings and fix guidance.

Robotti-io/copilot-security-instructions

Skill Claude CodeCodex

Standard validation checklist to prove a security fix works and doesn’t regress behavior.