Security checklist for OpenWebF/WebF apps (untrusted content, plugin vetting, API keys, storage).
path# Security Review (OpenWebF/WebF) Perform a security-focused review of a WebF app + Flutter host setup. ## Steps 1. If the user passed `$ARGUMENTS`, treat it as the directory to inspect; otherwise use the current working directory. 1. Call `mcp__openwebf__docs_search` for “Security” and summarize the highest-impact guidance. 1. Ask the user: - Do you load remote content? From where? - Do you use native plugins/bridge modules? - Any authentication / API keys in the WebF app? 1. Provide a checklist: - Never load untrusted content - Vet native plugins (source review + permiss...
Security review using STRIDE methodology with Mermaid diagram visualization
Analyze security vulnerabilities and create a security improvement plan
One-line description of what this command does.
Perform security analysis of Terraform configuration