dotnet-security-review

Review .NET applications for OWASP Top 10 vulnerabilities and Telerik CVEs.

2|Updated Jan 31, 2026
One-click install
npx skills add https://github.com/michaelalber/ai-toolkit --skill dotnet-security-review
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: dotnet-security-review
Source: https://github.com/michaelalber/ai-toolkit/tree/main/skills/dotnet-security-review
Command: npx skills add https://github.com/michaelalber/ai-toolkit --skill dotnet-security-review

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill addresses the critical need for robust security in .NET applications by systematically identifying and reporting vulnerabilities based on OWASP Top 10 and Telerik-specific risks.

Core Features & Use Cases

  • Comprehensive Scanning: Analyzes code for common vulnerabilities like injection, broken access control, and cryptographic failures.
  • Telerik Component Audit: Specifically checks for known CVEs in Telerik UI components (ASP.NET AJAX, MVC, Blazor).
  • Manager-Friendly Reporting: Generates clear reports with executive summaries, risk ratings, and remediation roadmaps.
  • Use Case: A development team needs to ensure their .NET Core web application is secure before a major release. They use this Skill to perform a full security audit, identify high-risk vulnerabilities, and get actionable remediation steps.

Quick Start

Run a security review on the current .NET project, focusing on OWASP Top 10 and Telerik component vulnerabilities.

Frequently Asked Questions about dotnet-security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform an OWASP security audit on a .NET application?

To perform an OWASP security audit on a .NET application, you need a tool that systematically scans your codebase for vulnerabilities across all OWASP Top 10 categories and generates manager-friendly reports with remediation priorities. This Skill conducts that exact review.

What is the best way to check Telerik UI components for known security vulnerabilities?

Checking Telerik UI components for known vulnerabilities requires auditing ASP.NET AJAX, MVC, and Blazor elements for specific CVEs and insecure patterns. This Skill specializes in Telerik security reviews alongside broader .NET vulnerability scanning.

Can I scan .NET Framework code for broken access control and injection flaws?

Yes, you can scan both .NET and .NET Framework code for injection flaws, broken access control, and cryptographic failures. The review identifies insecure patterns and compliance gaps across the entire application codebase.

How do I generate a manager-friendly report for a .NET vulnerability assessment?

Generating a manager-friendly vulnerability assessment report involves producing executive summaries, risk ratings, and remediation roadmaps from your code scan. This Skill automatically formats its security findings into clear, prioritized reports.

Does this security review check for all OWASP Top 10 compliance gaps in .NET?

Yes, the security review checks for all OWASP Top 10 compliance gaps in .NET applications. It identifies vulnerabilities across every category and explains the associated security risks to ensure full compliance coverage.

Why should I use a specialized tool for .NET security posture evaluation before a release?

Evaluating a .NET security posture before release requires identifying high-risk vulnerabilities and mapping them to actionable remediation steps. A specialized review ensures your application is checked against OWASP standards and component-specific CVEs.