Code Reviewer - OWASP Security Expert

Detect OWASP Top 10 vulnerabilities in source code across languages.

1|Updated Mar 10, 2026

Search Tags:#owasp #remediation #sast #code-review #security-audit #pattern-detection #cwe

Ready to run

npx skills add https://github.com/Moisesjr20/gueclaw --skill code-reviewer-owasp-security-expert

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: Code Reviewer - OWASP Security Expert
Source: https://github.com/Moisesjr20/gueclaw/tree/main/.agents/skills/code-reviewer
Command: npx skills add https://github.com/Moisesjr20/gueclaw --skill code-reviewer-owasp-security-expert

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill provides automated, OWASP-aligned security auditing of source code to uncover vulnerabilities early in the development lifecycle.

Core Features & Use Cases

SAST-style scanning: pattern-based detection across languages to surface OWASP Top 10 findings.
Structured remediation output: actionable fixes and security scoring for PRs.
Use Case: ideal for pre-merge audits, PR reviews, and security-focused baselining across multi-repo projects.

Quick Start

Analyze a repository to discover OWASP vulnerabilities and generate a remediation-ready report.

Frequently Asked Questions about Code Reviewer - OWASP Security Expert

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I run an OWASP security audit on my source code before merging a pull request?▼

SAST pattern detection scans source code across multiple languages to identify OWASP Top 10 vulnerabilities during pre-merge audits, followed by a manual review stage that validates findings and assigns a security score with actionable remediation guidance.

What is SAST pattern detection and how does it find OWASP Top 10 vulnerabilities?▼

SAST pattern detection is a static analysis technique that scans source code across languages to surface OWASP Top 10 findings by matching known vulnerability patterns, which is then validated through a manual review to ensure accuracy before generating remediation steps.

Can I use this code review approach to scan an entire multi-repo project directory?▼

Yes, this code review approach supports security-focused baselining across multi-repo projects by allowing you to apply SAST pattern detection and manual review to entire project directories, generating a comprehensive security score and structured remediation output.

Does automated code review provide specific remediation steps for detected CWE vulnerabilities?▼

Automated code review provides structured remediation output that includes actionable fixes and a security score for identified vulnerabilities, ensuring developers receive clear guidance to resolve CWE and OWASP findings during PR reviews.

What is the best way to establish a security baseline across multiple repositories?▼

The best way to establish a security baseline is running automated, OWASP-aligned code audits across multi-repo projects, which applies SAST scanning and manual review to generate consistent security scores and structured remediation reports for all detected vulnerabilities.