Mesteriis Security Diff Review
Run a diff-scoped security review.
Workflow
- If
security-diff-scanfrom Codex Security is available, read and follow it. - Otherwise resolve the exact diff and review changed files plus directly supporting code.
- Build a narrow threat model for touched assets and trust boundaries.
- Discover plausible findings.
- Validate each finding with code evidence or mark it unvalidated.
- Report severity, exploit path, confidence, remediation, and proof gaps.
Focus
- authentication and authorization
- tenant isolation and ownership checks
- input validation and parsers
- filesystem paths and archive handling
- network calls, SSRF, redirects, webhooks
- secrets, config defaults, logs
- dependency and CI/CD changes
Rules
- Authorized code only.
- Review-only by default; do not edit files.
- Do not claim exploitability without evidence.
- Route concrete fixes to
fix-security-finding.