review-security

Analyze code for security vulnerabilities using CVE-derived patterns.

7|Updated Oct 20, 2025
One-click install
npx skills add https://github.com/borkweb/skills --skill review-security-borkweb
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: review-security
Source: https://github.com/borkweb/skills/tree/main/skills/core/review-security
Command: npx skills add https://github.com/borkweb/skills --skill review-security-borkweb

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires git, grep, python, yaml, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill performs deep security reviews of code, focusing on identifying and mitigating common security vulnerabilities and issues before they become exploited.

Core Features & Use Cases

  • Pattern-Based Analysis: Utilizes a comprehensive set of security patterns derived from real-world CVEs to analyze and identify potential security vulnerabilities.
  • Deep Code Review: Performs a thorough examination of code to uncover issues like buffer overflows, injection vulnerabilities, and improper error handling.
  • Automated Review Workflow: Automates the process of identifying and cataloging security issues, allowing developers to focus on fixing them.

Quick Start

Run the /review-security skill on your codebase to perform a security audit.

Frequently Asked Questions about review-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a security review on my codebase to find vulnerabilities?

To perform a security review, you run the skill against your codebase to conduct a deep analysis that identifies and mitigates common vulnerabilities like injection flaws and buffer overflows. It automates cataloging issues so developers can focus on fixes.

How does pattern matching work for secure coding and vulnerability assessment?

Pattern matching for vulnerability assessment works by applying a comprehensive set of security patterns derived from real-world CVEs to your code. This mechanism analyzes and identifies potential security vulnerabilities across various programming languages during the code review.

Do I need git and python installed to run an automated code analysis for security?

Yes, you need git, python, grep, and yaml installed to run this automated code analysis. These dependencies provide the necessary environment for code parsing and pattern matching required to execute the deep security review workflow.

What types of security vulnerabilities can a deep code review identify?

A deep code review identifies common security vulnerabilities such as buffer overflows, injection vulnerabilities, and improper error handling. It applies real-world CVE patterns to uncover these issues before they become exploited.

Can I use this vulnerability assessment tool across different programming languages?

Yes, you can use this vulnerability assessment tool across various programming languages. The pattern-based analysis utilizes comprehensive security patterns derived from real-world CVEs that apply to multiple languages, ensuring broad codebase coverage.