security-baseline - Security baseline checker for code changes
Runs nine security checks on code changes against baseline rules
Tags
Updated: 2026-05-09Capabilities
Typical Inputs
Typical Outputs
What this skill does
- check CSP headers
- verify OAuth callback flow
- validate PKCE cookie storage
- inspect JWKS caching
- audit CSRF defenses
- verify auth method parity
- check stdio auth carve-out
- validate URL redaction
- inspect error backtraces
Inputs
- spec.md reference
- changed files
- security baseline rules
Outputs
- violation report
- HIGH violation count
- section pass/fail status
Requirements
- security-reviewer permission
- spec.md access