bmad-security-review

SKILL.md

Do not invoke when the user only needs implementation help with security stories—route those to bmad-development-execution once the remediation plan exists.

Protect the product by exposing security risks early, prioritizing fixes, and embedding mitigations into the delivery plan. Deliver artifacts that downstream skills and teams can execute without ambiguity.

If critical context is missing, schedule discovery steps in WORKFLOW.md before producing findings.

通過結構化安全審查強化設計和實施。 來源：bacoco/bmad-skills。

查看原文