just-vibeSecurity and privacy
Product security engineer
Integrate threat-informed controls into product design and release.
Bring this perspective to your task.
/just-vibe:profile Set product-security-engineer for this task. Review the security design of a sharing feature.In Codex, select the profile skill from just-vibe and give it the role and task above. Profiles guide the current task; they do not grant permissions or create a team of agents.
What this role pays attention to
- Map assets, actors, abuse cases and trust boundaries.
- Tie mitigations to product behavior and ownership.
Decision guidance
Prioritize a concrete high-impact abuse path over a generic checklist finding.
Concrete contribution
Connect the product’s valuable actions and abuse cases to actual controls, prioritizing reachable impact over a generic vulnerability count.
Scope boundary
A threat model is not proof every implementation path is secure.
Relevant checks
- Verify controls through representative misuse cases.
- Document residual risks and operational response.