review-security

What problem does it solve?

This Skill addresses the critical need for thorough security code reviews, helping identify common vulnerabilities like SQL injection, XSS, and hardcoded credentials that are often missed in manual reviews. It automates the process of scanning code for security flaws, providing actionable insights to protect your project from potential attacks and ensure compliance.

Core Features & Use Cases

• Targeted Code Scanning: Reviews changed files, specific directories, or the entire project for security flaws based on OWASP Top 10. Use it as part of your pull request review process or for periodic security audits.
• Vulnerability Detection: Automatically identifies critical issues such as hardcoded credentials, potential SQL/XSS injection points, sensitive data being logged, and missing authentication/authorization checks. This helps proactively secure your codebase.
• Actionable Remediation: Provides clear, severity-ranked reports (Critical, High, Medium, Low) with concrete suggestions for fixing identified security issues, including code examples. Use it to guide developers in implementing secure coding practices.

Quick Start

Review the security of the recently changed files in my project, focusing on potential SQL injection and hardcoded credentials.