{"id":77041,"plugin_id":"plugins_6ab4123730588191bc9267b9458b2670","kind":"skill","collection_source":"plugin_package","comparison_source":null,"observed_at":"2026-11-03T00:12:20.267Z","digest":"268af81343e5b5b561862efc690ef87a5f18a5a9af33989aab115e6865715a84","against":null,"payload":{"description":"Translate the product design into proportionate security, privacy, accessibility and reliability requirements.","included_files":[],"name":"review-security-quality","skill_md_contents":"---\nname: review-security-quality\ndescription: Translate the product design into proportionate security, privacy, accessibility and reliability requirements.\n---\n\n# Review Security Quality\n\n## When to use\nTranslate the product design into proportionate security, privacy, accessibility and reliability requirements.\n\n## Workflow\nUse the actual workflows to identify authn/authz, tenant access, sensitive data, retention, secrets, abuse paths, destructive operations, recovery, availability and platform constraints. Define requirements with verification methods rather than vague 'secure and scalable'. Prefer current OWASP ASVS and WCAG guidance when relevant.\n\nOutput top risks, required controls, acceptance checks, unresolved blockers and owners. No security certification or audit claim without independent verification. See `../../references/nonfunctional-quality.md` and `../../references/ux-and-accessibility.md`.\n\n## Deliverable and truthfulness\nLead with the decision or result, then show supporting evidence, explicit assumptions, risks, and a concrete next step. Adapt depth to the user's ask. If required tools or source material are missing, disclose the limit; do not simulate inspection, implementation or research. Never write/modify/deploy without relevant authorization.\n\nRelevant reference: `../../references/nonfunctional-quality.md`.\n"},"changes":[],"summary":"First saved snapshot. No earlier version is available for comparison.","summary_kind":"deterministic","summary_metadata":{}}