From senior-review
Comprehensive defect taxonomy knowledge base -- 16 macro-categories, 140+ subcategories of source code defects with CWE/OWASP mappings, detection strategies, fix patterns, and review frameworks. Used by senior-review agents (code-auditor, security-auditor, ui-race-auditor) to enrich analysis with structured defect knowledge.
npx claudepluginhub acaprino/alfio-claude-plugins --plugin senior-reviewThis skill uses the workspace's default tool permissions.
Unified classification of source code defects synthesizing MITRE CWE, OWASP Top 10, NASA Power of 10, IBM ODC, IEEE 1044, and Beizer's taxonomy into actionable detection references.
Acquire memory dumps from live systems/VMs and analyze with Volatility 3 for processes, networks, DLLs, injections in incident response or malware hunts.
Provides x86-64/ARM disassembly patterns, calling conventions, control flow recognition for static analysis of executables and compiled binaries.
Identifies anti-debugging checks like IsDebuggerPresent, NtQueryInformationProcess in Windows binaries; suggests bypasses via patches/hooks/scripts for malware analysis, CTFs, authorized RE.
Unified classification of source code defects synthesizing MITRE CWE, OWASP Top 10, NASA Power of 10, IBM ODC, IEEE 1044, and Beizer's taxonomy into actionable detection references.
Load relevant references based on the code domain under review. Do NOT load all files -- select only what applies.
| Reference | When to load |
|---|---|
references/concurrency-state.md | Concurrent/parallel code, shared state, async patterns, closures, variable scoping |
references/logic-types.md | Comparisons, boolean logic, type conversions, generics, serialization |
references/memory-resources.md | Memory management (C/C++/Rust), resource lifecycle, error handling, performance bottlenecks |
references/security.md | Security review -- injection, auth, crypto, secrets, CORS, SSRF, input validation |
references/distributed-integration.md | Microservices, APIs, distributed state, message queues, service mesh, migrations |
references/data-design-ops.md | Database/ORM, design patterns, build/deploy, testing, observability |
references/detection-matrix.md | Cross-cutting: detection channels per category, language-weighted focus, ROI prioritization |
| Reference | When to load |
|---|---|
references/review-frameworks.md | Always load for code-auditor. Contains cognitive models, failure flow methodology, anti-pattern checklist, mental models, severity/scoring system |