Code Reviewer - OWASP Security Expert

Detect OWASP Top 10 vulnerabilities in source code across languages.

1|Updated Mar 10, 2026
One-click install
npx skills add https://github.com/Moisesjr20/gueclaw --skill code-reviewer-owasp-security-expert
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: Code Reviewer - OWASP Security Expert
Source: https://github.com/Moisesjr20/gueclaw/tree/main/.agents/skills/code-reviewer
Command: npx skills add https://github.com/Moisesjr20/gueclaw --skill code-reviewer-owasp-security-expert

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill provides automated, OWASP-aligned security auditing of source code to uncover vulnerabilities early in the development lifecycle.

Core Features & Use Cases

  • SAST-style scanning: pattern-based detection across languages to surface OWASP Top 10 findings.
  • Structured remediation output: actionable fixes and security scoring for PRs.
  • Use Case: ideal for pre-merge audits, PR reviews, and security-focused baselining across multi-repo projects.

Quick Start

Analyze a repository to discover OWASP vulnerabilities and generate a remediation-ready report.

Frequently Asked Questions about Code Reviewer - OWASP Security Expert

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run an OWASP security audit on my source code before merging a pull request?

SAST pattern detection scans source code across multiple languages to identify OWASP Top 10 vulnerabilities during pre-merge audits, followed by a manual review stage that validates findings and assigns a security score with actionable remediation guidance.

What is SAST pattern detection and how does it find OWASP Top 10 vulnerabilities?

SAST pattern detection is a static analysis technique that scans source code across languages to surface OWASP Top 10 findings by matching known vulnerability patterns, which is then validated through a manual review to ensure accuracy before generating remediation steps.

Can I use this code review approach to scan an entire multi-repo project directory?

Yes, this code review approach supports security-focused baselining across multi-repo projects by allowing you to apply SAST pattern detection and manual review to entire project directories, generating a comprehensive security score and structured remediation output.

Does automated code review provide specific remediation steps for detected CWE vulnerabilities?

Automated code review provides structured remediation output that includes actionable fixes and a security score for identified vulnerabilities, ensuring developers receive clear guidance to resolve CWE and OWASP findings during PR reviews.

What is the best way to establish a security baseline across multiple repositories?

The best way to establish a security baseline is running automated, OWASP-aligned code audits across multi-repo projects, which applies SAST scanning and manual review to generate consistent security scores and structured remediation reports for all detected vulnerabilities.