Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/danielvm-git/bigpowers/security-reviewnpx skills add danielvm-git/bigpowers --skill security-reviewgit clone --depth 1 https://github.com/danielvm-git/bigpowersWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/danielvm-git/bigpowers/security-review)<a href="https://agentmods.dev/skills/danielvm-git/bigpowers/security-review"><img src="https://agentmods.dev/badge/skills/danielvm-git/bigpowers/security-review.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00076 | $0.04817 |
| Opus 5 | $0.00038 | $0.02409 |
| Sonnet 5 | $0.00015 | $0.00963 |
| Haiku 4.5 | $0.00008 | $0.00482 |
Grade A, and why
security-review scanned grade A with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
| **Vulnerable** | User-controlled URL passed to server-side HTTP client: `requests.get(user_url)` | Runs shell commandslowCapability
Expected in a hook, worth knowing in a rule or an instructions file.
- `os.system(f"rm {user_path}")` where user controls the path How it starts
The opening of the file, as written. The whole thing — 385 lines — stays where its author put it; the contents beside it link to each section on GitHub.
story: e45s41
story: e26s01
story: e26s02
story: e26s03
story: e26s04
story: e26s05
story: e26s06
story: e26s07
story: e45s26
Security Review
HARD GATE — Requires git context (branch with merge-base or diff). Never writes files outside
specs/security/. Findings below confidence 8/10 are suppressed. Pre-flight:git rev-parse HEAD >/dev/null 2>&1
Parallel worktree mode (e45s18)
When running alongside audit-code, use isolated worktrees so scans do not race on the same index:
bash scripts/lib/parallel-review-worktrees.sh security-review
Each check gets a detached worktree at .bigpowers/worktrees/review-<name>/; reports still write only under specs/security/.
5-phase scan
| # | Phase | What |
|---|---|---|
| 1 | Scope Resolution | Detect diff via git diff --merge-base origin/HEAD; resolve languages/frameworks from dependency files |
| 2 | Context Research | Identify existing security patterns, sanitization, auth model in the codebase |
| 3 | Vulnerability Assessment | Trace user input → sink; check auth boundaries, crypto, deserialization, path ops |
| 4 | False-Positive Filtering | Cross-check each finding against exclusion rules; reject confidence < 8 |
| 5 | Report Generation | Output structured markdown: file:line, severity, category, exploit scenario, fix |
Categories
Covered: SQLi, XSS, SSRF, command injection, auth bypass, unsafe deserialization, path traversal, IDOR, crypto flaws, secrets exposure, template injection, NoSQLi
CWE mapping mandate (e45s26)
Every new detection rule added to this skill MUST:
- Map to a CWE ID in
REFERENCE-vuln-categories.md(e.g. SQLi → CWE-89, XSS → CWE-79). - Ship two fixture pairs under
skills/security-review/fixtures/:- Positive — minimal code the rule MUST flag (vulnerable pattern present).
- Negative — structurally similar code the rule MUST NOT flag (safe pattern / false-positive guard).
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- today First seen · 385 lines · 76 tokens per session scan A 96c7a5d14c11
security-review is a skill published in the GitHub repository danielvm-git/bigpowers (163 stars, last pushed 3d ago), licensed MIT. It adds 76 tokens to every session and 4,817 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 2 findings (makes network calls, runs shell commands). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other skills, from other repositories
shared/tech-stack-detection
检测项目技术栈的通用方法，通过分析配置文件识别语言、框架、工具链.
devops/changelog-generation
自动生成 CHANGELOG，基于 git 提交历史和 pipeline 产物信息，遵循 Conventional Commits 和 Keep a Changelog 规范.
boss
可审计的 agent 团队：BMAD 全自动研发流水线编排器。编排 9 个专业 Agent（PM、架构师、UI Designer、Tech Lead、Scrum Master、Frontend、Backend、QA、DevOps）从需求到部署，每一步都有事件溯源 + 不可绕过门禁 + 确定性 eval——可验证测试真跑、门禁真过。支持单环节切片命令（/boss:plan /review /qa /ship）与无 CLI 纯 Markdown 降级。 Triggers: 'boss mode', '/boss', '全自动开发', '从需求到部署', '帮我做一个', 'build this', 'ship it', '全流程'…
debloat
Compress an artifact that has accreted into bloat — padding, over-qualification, fused sentences, walls of enumeration, adjacent restatement — down to its load-bearing density, meaning preserved. Use when prose is correct and current but has grown verbose or patched-over and you want it tight without a full rewrite.
bmad-validate-prd
Validate a PRD against standards. Use when the user says "validate this PRD" or "run PRD validation".
ship
Validate a branch, run quality gates, update documentation and changelog, and open a pull request. Supports GitHub (primary) and Azure DevOps (secondary). Designed for JavaScript/TypeScript projects; quality gate detection requires package.json. Use when the user says "ship", "ship this", "open a PR", "prepare a PR"…