# ops-appsec

Application and code security assessment workflows for Specter Codex.

- **Kind:** plugin (installs as one bundle)
- **Owner:** SpecterOps
- **Source:** https://github.com/SpecterOps/skills (`plugins/ops-appsec`)
- **Pinned commit:** `e655f93ab694c446b76672efe6e71e62aac0b7b8`
- **Page:** https://forefy.com/plugins/9cade3da-70aa-50ea-a155-bf1249ed9990
- **API (JSON):** https://forefy.com/api/asr/plugins/9cade3da-70aa-50ea-a155-bf1249ed9990

## Install

Ask your agent: `Install the ops-appsec plugin securely from: https://forefy.com/plugins/9cade3da-70aa-50ea-a155-bf1249ed9990 globally to ~/.claude/skills`

Or run the pinned install script: `curl -fsSL https://forefy.com/api/asr/plugins/9cade3da-70aa-50ea-a155-bf1249ed9990/install | bash` (`?location=project` for the current project, `&shell=powershell` with `irm ... | iex`; `harness=agents` prints the Codex commands).

## Skills in this plugin (3)

- [security-review](https://forefy.com/skills/d15f88ff-a516-42d7-9e79-1c0c0e82b15b): Perform a security-focused review of current git changes. Use when reviewing staged/unstaged diffs, checking for vulnerabilities, and deciding merge readiness.
- [secret-scan](https://forefy.com/skills/e2fa53d4-6f81-4db7-95b0-f2afa2e808ec): Scan repositories and codebases for exposed secrets, credentials, and sensitive data. Use for GitHub repo/org/user scans, local code scans, and secret-discover…
- [webapp-review](https://forefy.com/skills/5982f0f2-3373-4c3d-9759-2c0de1b750af): Web application security testing workflow and checklist generation. Use when planning or executing web app assessment steps, including auth, API, injection, an…