devsec-reviewing-code-for-security

Analyze code against OWASP Top 10 and ASVS 5.0 to identify vulnerabilities with CWE mappings.

Updated Aug 23, 2026
One-click install
npx skills add https://github.com/wizeline/sdlc-agents --skill devsec-reviewing-code-for-security
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: devsec-reviewing-code-for-security
Source: https://github.com/wizeline/sdlc-agents/tree/main/aicores/security-agent/skills/devsec-reviewing-code-for-security
Command: npx skills add https://github.com/wizeline/sdlc-agents --skill devsec-reviewing-code-for-security

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) and assets (resource) components.

What problem does it solve?

This Skill acts as an expert security code reviewer, identifying vulnerabilities and providing actionable guidance to secure your codebase against common and advanced threats.

Core Features & Use Cases

  • Vulnerability Identification: Detects security flaws across OWASP Top 10, CWEs, and secure coding domains.
  • Contextualized Remediation: Provides specific, in-language code fixes and explanations.
  • Use Case: Submit a code snippet or file for a thorough security review, receive a prioritized report of findings, and get clear instructions on how to fix each vulnerability, mapped to relevant security standards.

Quick Start

Use the devsec-reviewing-code-for-security skill to review the provided code for security vulnerabilities.

Frequently Asked Questions about devsec-reviewing-code-for-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review code for OWASP Top 10 vulnerabilities?

Perform a security code review by submitting a code snippet or file for analysis against OWASP Top 10 2025, ASVS 5.0, and 14 secure coding domains. You receive a prioritized report of findings mapped to CWE IDs with specific in-language remediation examples and checklists.

What is a CWE ID in secure coding?

A CWE ID in secure coding is a standardized vulnerability identifier mapped during code review. Vulnerabilities detected across OWASP Top 10 and secure coding domains are mapped to specific CWE IDs to provide clear remediation instructions and language-specific code fixes.

Can I get language-specific remediation examples for security flaws?

Yes, you can get language-specific remediation examples for security flaws. The security code review provides specific in-language code fixes and explanations for critical, high, medium, and low findings mapped to relevant security standards.

Does this security code review support ASVS 5.0 compliance?

Yes, this security code review supports ASVS 5.0 compliance. It analyzes code against the ASVS 5.0 standard alongside OWASP Top 10 2025 and 14 secure coding domains to identify vulnerabilities and generate detailed remediation guides.

How are security findings prioritized in the vulnerability report?

Security findings are prioritized by critical, high, medium, and low severity levels. The review generates real-time reports detailing these findings and provides clear instructions on how to fix each vulnerability mapped to relevant security standards.