Identify security issues in code changes with severity-ranked Markdown reports.
npx skills add https://github.com/ssiumha/dots --skill review-security
Please help me install this Agent Skill. Skill: review-security Source: https://github.com/ssiumha/dots/tree/main/prompts/skills/review-security Command: npx skills add https://github.com/ssiumha/dots --skill review-security
This Skill addresses the critical need for thorough security code reviews, helping identify common vulnerabilities like SQL injection, XSS, and hardcoded credentials that are often missed in manual reviews. It automates the process of scanning code for security flaws, providing actionable insights to protect your project from potential attacks and ensure compliance.
Review the security of the recently changed files in my project, focusing on potential SQL injection and hardcoded credentials.
High-intent search queries and answers about installing and using this skill.
Automated security code review scans your codebase for common vulnerabilities like SQL injection, XSS, and hardcoded credentials using OWASP Top 10 checks. It analyzes changed files, specific directories, or your entire project, producing severity-ranked reports with concrete remediation guidance and line-number references so you can fix issues quickly.
Yes, security scanning works as part of pull request reviews by performing diff-based selection on changed files. It applies file-type filtering and structured security checks across languages and configuration files, surfacing issues with severity levels and actionable fixes before code merges.
Security code review detects hardcoded credentials, SQL and XSS injection points, sensitive data being logged, and missing authentication or authorization checks. It also identifies other OWASP Top 10 vulnerabilities and provides severity rankings from Critical to Low with specific remediation examples.
You can choose targeted or comprehensive scanning. Review recently changed files for focused checks, scan specific directories for targeted audits, or run full project scans for comprehensive security assessment. Diff-based selection automates file identification when used in pull request workflows.
Security scanning supports multiple languages and configuration files through file-type filtering and structured checks. It adapts vulnerability detection logic to language-specific patterns, enabling unified security audits across polyglot codebases without language-specific tool chaining.
Security review generates Markdown reports with severity-ranked findings, file paths, line numbers, and concrete remediation guidance including code examples. Reports surface actionable insights formatted for developer consumption in code review and audit workflows.
Snowflake-LabsA concise summary of your roleplay character: name,</name> personality, and/or behavior, formatted as a single string sentence. Typically不超过50字，此处省略
jaskaranhundalManage security finding lifecycles with risk scores and SLA enforcement.
gztcodeAutomate code review with static security scanning, quality gates, and an independent reviewer subagent.
thisisqubikaAnalyze code repositories for vulnerabilities using SAST and AI triage.
