core-security

To run universal security checks during a pull request, execute the framework-agnostic checklist against changed files to identify and classify vulnerabilities. The process surfaces high-risk findings, such as secrets or insecure eval, in a structured format for triage.

Framework-agnostic code reviews can detect security vulnerabilities including leaked secrets, insecure eval usage, console exposure, and error information leaks. The checks also cover modern OWASP-adapted threat patterns across both frontend and backend codebases.

Yes, you can use automated security checks for both frontend and backend codebases. The skill applies a framework-agnostic checklist to any codebase, identifying vulnerabilities and returning structured findings during pull requests or security audits.

You can configure code review threat detection rules by modifying the YAML-configurable set of universal checks. This allows you to enforce specific security checks and modern threat patterns tailored to your codebase's requirements during security audits.

Yes, this security audit tool works with any software framework because it uses a framework-agnostic checklist. It applies universal checks and grep patterns to identify security vulnerabilities across diverse frontend and backend codebases during code reviews.