PACK / Active
Application Security
Threat modeling, web and API security review, and dependency-risk analysis for teams that need security evidence before release.
An installable application-security workflow for finding design threats early, reviewing web and API trust boundaries, and evaluating software-supply-chain risk without turning one scanner or checklist into the security strategy.
How to use this pack
A pack is not a fixed workflow. Install the related methods together, then invoke only the skill whose trigger matches the current task; responsibility stays with each member skill.
Expected outcomes
- 01
Turn application architecture and attack surface into prioritized security risks, controls, and verification evidence
- 02
Review web, API, and dependency risk with explicit scope, reproducible findings, remediation guidance, and residual-risk tracking
04
Pack composition
Evidence using methods from this system
These reports explicitly use one or more methods contained in this system.
Method overlap only — not proof that the pack was used as a unit.
Install this pack
Run the command for your operating system from the repository root.
Bash
./install.sh --pack application-securityPowerShell
./install.ps1 --pack application-securityPACK BUNDLE
Every method in this pack, bundled as an independent Skill ZIP.4 skills · ZIPFor ChatGPT, extract the bundle and upload each Skill ZIP separately.