leeway-product-security
Product security/AppSec capability hub for STRIDE threat modeling, SAST/DAST, vulnerability assessment, penetration-test remediation, cryptography, identity, zero trust and compliance evidence.
Files1
View on GitHubSKILL.mdskills/company/product-security/SKILL.md
GitHubLeeWay Product Security
Weave
Threat modeling → static/dynamic/dependency/secret scanning → exploitability validation → remediation → cryptography/identity/control verification → security acceptance evidence.
Composition
Use code-security, authentication, secure architecture, threat-modeling, SAST/DAST, compliance, privacy, SRE and Veritas skills. Security findings can independently block a release even when aggregate metrics pass.