diyu-security-reviewer

Automate security reviews by inspecting touched files and generating an OWASP-aligned report that systematically verifies common web application security risks and outputs clear remediation points.

Detect hardcoded secrets by scanning the codebase for credential patterns to reduce exposure risks, ensuring direct secret exposure is avoided across repository changes.

Validate multi-tenant isolation by enforcing Row Level Security (RLS) checks that ensure data access follows tenant boundaries, preventing cross-tenant data leakage during code reviews.

The security audit covers LLM gateway redlines to enforce compliance and validates file upload paths and user input security to prevent vulnerabilities in API endpoints.

Run an OWASP security audit on a merge request by inspecting new modules and change sets to execute a complete security review that outputs a comprehensive risk report.