skills.rest
cmaenner
cmaennerCOMMUNITY
Explore all skills by this author →
Website𝕏@dafingaGitHub

code-review-security

Scan codebases for security vulnerabilities and dependency risks.

5|1|Updated Mar 5, 2026
Search Tags:#static analysis#code review#security#dependency analysis#vulnerability scanning
One-click install
npx skills add https://github.com/cmaenner/agent-security-playbook --skill code-review-security-cmaenner
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: code-review-security
Source: https://github.com/cmaenner/agent-security-playbook/tree/main/template
Command: npx skills add https://github.com/cmaenner/agent-security-playbook --skill code-review-security-cmaenner

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automates the process of reviewing code for common security vulnerabilities, helping to identify and fix potential issues before they can be exploited.

Core Features & Use Cases

  • Vulnerability Scanning: Detects security flaws in code.
  • Dependency Analysis: Checks for known vulnerabilities in project dependencies.
  • Use Case: Before merging a new feature, use this skill to scan the codebase for any security risks, ensuring the integrity of the application.

Quick Start

Scan the attached code directory for security vulnerabilities.

Frequently Asked Questions about code-review-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform an automated security review on my codebase?▼

Automated security reviews identify common vulnerabilities by scanning your codebase. This skill performs static analysis and dependency analysis to detect security flaws and known risks in project dependencies.

What is dependency vulnerability scanning in software development?▼

Dependency vulnerability scanning checks your project dependencies against known vulnerability databases. It helps identify risks in third-party libraries, allowing you to fix potential issues before they can be exploited.

When do I need to run static analysis for security vulnerabilities?▼

Static analysis for security vulnerabilities is needed before merging new features into your application. Running it proactively during the software development lifecycle ensures application integrity and manages your security posture.

Can I use this to check for known vulnerabilities in project dependencies?▼

Yes, you can check for known vulnerabilities in project dependencies. The skill performs dependency analysis using vulnerability databases to assess risks and identify flawed third-party components.

What's the best way to scan a code directory for security risks before a merge?▼

The best way to scan a code directory for security risks is using automated static analysis. This skill reviews the codebase to detect security flaws and dependency risks, ensuring application integrity before merging.

Does this security review require any external tools to run?▼

Comprehensive security reviews require static analysis tools and dependency vulnerability databases. This skill uses these components to perform automated vulnerability scanning and dependency analysis on your codebase.

Related Skills

Explore More Software Engineering Skills→
voidrotvoidrot

sast-configuration

Configure SAST tools like Semgrep, CodeQL, and SonarQube for CI/CD pipelines.

Community
Intermediate
jeffpeckyjeffpecky

security-best-practices

Identify security issues and generate reports with mitigation strategies for codebases.

Community
Advanced
hzy970907hzy970907
23

springboot-verification

Automate Spring Boot build, static analysis, tests, and vulnerability scans.

Community
Advanced
jassicsjassics
6

mobile-pentest

Automate MASTG-based mobile penetration tests on Android and iOS apps.

Community
Advanced