Identify security vulnerabilities in code and deployment configuration.
npx skills add https://github.com/abranjith/spec-lite --skill review-security-abranjith
Please help me install this Agent Skill. Skill: review-security Source: https://github.com/abranjith/spec-lite/tree/main/skills/review-security Command: npx skills add https://github.com/abranjith/spec-lite --skill review-security-abranjith
This Skill helps teams identify security weaknesses in a codebase and its deployment configuration before they become exploitable incidents. It turns a broad, time-consuming security review into a structured, prioritized assessment with clear remediation guidance.
Use the review-security skill to audit this repository and write a prioritized security report with actionable fixes.
High-intent search queries and answers about installing and using this skill.
A comprehensive security review manually analyzes application code and infrastructure settings to identify vulnerabilities across authentication, authorization, injection, secrets, dependencies, and error handling, producing prioritized remediation guidance and a structured report.
Prioritizing security vulnerabilities involves ranking findings by severity based on manual source review and threat modeling, allowing teams to distinguish immediate fixes from lower-priority issues and create an actionable remediation plan.
Yes, auditing application authentication, API security, input validation, and dependency vulnerabilities together is possible through a structured security review that checks these areas concurrently to produce a unified risk assessment.
Yes, a manual security review covers infrastructure settings and secret scanning by applying threat modeling to deployment configurations, ensuring data protection and infrastructure security weaknesses are identified and remediated.
Generating a remediation plan from an OWASP vulnerability assessment requires conducting manual source review and threat modeling across the codebase, then translating the prioritized findings into a structured security report with clear fixes.
You should not rely solely on automated dependency audits when complex logic requires manual source review and threat modeling to uncover injection flaws, authorization bypasses, and error handling weaknesses that automated scans often miss.
cyperx84Scan source code, dependencies, and infrastructure for security vulnerabilities.
shalevaminIdentify security vulnerabilities in code and infrastructure with structured audit reports.
florianbuetowScan code and dependencies for vulnerabilities mapped to CWEs.
proffesor-for-testingTest software security vulnerabilities using OWASP principles.
