Germany

Vamsi

Product Security Engineer

Projects Notes

Profile

Product security that scales with engineering.

Turning security requirements into practical product and platform capabilities.

  • Guide product security decisions across the lifecycle - from architecture and threat modeling to vulnerability response and release readiness.
  • Build scalable controls, paved roads, automation, and tooling that engineering teams can adopt by default.
  • Lead security for AI-powered features and agentic workflows across secure design, guardrails, tool-use controls, threat detection, logging, and security observability.
GitHub Source code & projects LinkedIn Professional network Credly Verified certifications

Open Source

Tools

CLI pip install skill-scanner

skill-scanner

Security scanner for AI skills and instruction files across agentic workflows. Uses multiple LLMs plus VirusTotal to flag prompt injection, data-exfil patterns, and suspicious capability escalations.

  • Python
  • CLI
  • AI Security
  • Agents
  • Multi-LLM
  • VirusTotal
GitHubPyPI
Skills git clone https://github.com/thedevappsecguy/sec-skills

sec-skills

Shared AI agent skills repository for the agentic coding workflows I use day-to-day. Battle-tested prompts, guardrails, and review checklists for Claude, Cursor, and Codex.

  • AI Agents
  • Skills
  • Claude
  • Cursor
  • Codex
  • Agentic
GitHub
CLI pip install safe-packages

safe-packages

A CLI tool to scan dependencies for vulnerabilities and flag potentially compromised packages. Supply chain security for cautious teams - OSV-backed with heuristics for typosquats and sudden maintainer changes.

  • Python
  • CLI
  • Security
  • OSV
  • Supply Chain
GitHubPyPI

Notes

Recent notes

View all notes
  1. Supply Chain Security in CI/CD Supply chain security in CI/CD needs more than prevention. The critical gap is detecting when workflows, credentials, runners, or dependencies are turned into attack paths.
  2. sec-skills Use this when you want one shared set of skills for recurring agentic coding workflows across tools.
  3. skill-scanner Use this when you want to review skills in any agentic workflow before they enter local workflows, CI, or other automated flows.