skills.rest
jaskaranhundal
jaskaranhundalCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

appsec-code-review

Analyze code changes for OWASP Top 10 vulnerabilities and dependency risks.

3|3|Updated Mar 8, 2026
Search Tags:#code review#security#vulnerability#owasp#sast#devsecops
One-click install
npx skills add https://github.com/jaskaranhundal/usap-skills --skill appsec-code-review
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: appsec-code-review
Source: https://github.com/jaskaranhundal/usap-skills/tree/main/appsec-devsecops/appsec-code-review
Command: npx skills add https://github.com/jaskaranhundal/usap-skills --skill appsec-code-review

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill automates the security review of code changes, identifying critical vulnerabilities like OWASP Top 10 risks, logic flaws, and insecure dependencies before they reach production.

Core Features & Use Cases

  • Vulnerability Detection: Scans code for common security flaws (SQLi, XSS, etc.) and dependency vulnerabilities.
  • PR Security Gate: Integrates into CI/CD to block merges based on severity of findings.
  • Developer Guidance: Provides actionable remediation advice mapped to CWEs.
  • Use Case: Automatically review a pull request for security issues, blocking the merge if a critical SQL injection vulnerability is found and providing developers with the exact fix.

Quick Start

Run the appsec code review tool to analyze the current code changes and output findings in JSON format.

Frequently Asked Questions about appsec-code-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate security code review for pull requests?▼

To automate security code review for pull requests, this Skill analyzes code changes to identify OWASP Top 10 vulnerabilities and logic flaws. It functions as a PR security gate, outputting CWE-mapped findings with developer-friendly remediation guidance in JSON format to block insecure merges.

What is static code analysis for OWASP Top 10 vulnerabilities?▼

Static code analysis for OWASP Top 10 vulnerabilities is the process of scanning source code without executing it to detect security flaws like SQL injection and XSS. This Skill performs this analysis on code changes, mapping discovered issues to CWEs and providing actionable remediation advice.

How do I block a pull request merge if a critical vulnerability is found?▼

To block a pull request merge when a critical vulnerability is found, you integrate static analysis as a CI/CD security gate. This Skill evaluates code changes for severe security flaws like SQL injection, outputting JSON findings to prevent insecure code from reaching production.

Does DevSecOps static analysis detect insecure dependencies in code changes?▼

Yes, DevSecOps static analysis can detect insecure dependencies in code changes. This Skill scans for dependency risks alongside OWASP Top 10 vulnerabilities and logic flaws, providing developers with precise remediation guidance to resolve the identified issues.

Can I get developer-friendly remediation guidance for CWE-mapped security findings?▼

Yes, you can get developer-friendly remediation guidance for CWE-mapped security findings. This Skill outputs JSON results containing actionable advice mapped directly to CWEs, helping developers understand and fix vulnerabilities like SQLi and XSS efficiently.

Related Skills

Explore More Software Engineering Skills→
winsorllcwinsorllc

pr-description-generator

Generate pull request descriptions from git diffs and commit history.

Community
Intermediate
matteocervellimatteocervelli
25

planning-doc-generator

Generate project assessment Markdown reports from structured JSON data.

Community
Intermediate
Logos-LiberLogos-Liber
17

vulnerability-scanning

Identifies security vulnerabilities in code, dependencies, and container images.

Official
Advanced
summarybotngsummarybotng
2

security-testing

Scan code, dependencies, and configurations for OWASP Top 10 vulnerabilities.

Official
Advanced