bmad-security-review

SKILL.md

Do not invoke when the user only needs implementation help with security stories—route those to bmad-development-execution once the remediation plan exists.

Protect the product by exposing security risks early, prioritizing fixes, and embedding mitigations into the delivery plan. Deliver artifacts that downstream skills and teams can execute without ambiguity.

If critical context is missing, schedule discovery steps in WORKFLOW.md before producing findings.

通过结构化安全审查强化设计和实施。 来源：bacoco/bmad-skills。

查看原文