skills.rest
Harries
HarriesCOMMUNITY
Explore all skills by this author →
Website𝕏@HarriesSteeleGitHub

review-security

Identify security risks in codebases and configurations during code reviews.

1|Updated Dec 22, 2025
Search Tags:#security#vulnerability#owasp#audit#remediation#best-practices#code-review
One-click install
npx skills add https://github.com/Harries/hydpromptkit --skill review-security-harries
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: review-security
Source: https://github.com/Harries/hydpromptkit/tree/main/skills/review-security
Command: npx skills add https://github.com/Harries/hydpromptkit --skill review-security-harries

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

代码安全评审时需要系统地识别常见漏洞、设计缺陷与合规风险，帮助团队提升代码安全性和合规性。

Core Features & Use Cases

  • 漏洞识别: 通过对代码和配置进行系统性审查，识别常见安全漏洞和不安全模式。
  • 合规与最佳实践: 引导遵循 OWASP Top 10、行业安全标准的评审要点。
  • 应用场景: 在新功能上线前进行安全审查、在代码合并前执行安全回归、对现有系统进行安全评估与改进。

Quick Start

Initiate a comprehensive security review of the provided codebase, identify high-risk issues, and propose concrete remediation steps.

Frequently Asked Questions about review-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a security audit on my codebase before release?▼

Security audits require systematically reviewing source files and configurations to identify common vulnerabilities and unsafe patterns. This process outputs a prioritized risk list with actionable remediation steps aligned with OWASP Top 10.

What is OWASP Top 10 compliance in code reviews?▼

OWASP Top 10 compliance in code reviews involves evaluating codebases against critical security risks to identify vulnerabilities and design flaws. It ensures software projects meet industry security standards and best practices before deployment.

How do I find and fix configuration security risks in my software project?▼

Finding configuration security risks requires analyzing configuration data alongside source files during a security review. This yields a prioritized list of identified risks paired with concrete remediation steps to resolve vulnerabilities.

Can I use automated code review for pre-release security checks?▼

Automated code review supports pre-release security checks by systematically identifying common vulnerabilities and unsafe patterns in codebases. It assesses configurations to deliver prioritized, actionable remediation steps for high-risk issues.

What do I need to provide for a comprehensive security vulnerability assessment?▼

A comprehensive security vulnerability assessment requires providing access to project source files and configuration data. The review then outputs a prioritized risk list with concrete remediation steps to resolve identified issues.

Related Skills

Explore More Software Engineering Skills→
googlegoogle
731

mantis-summarize

Generate security-focused directory summaries via bottom-up repository traversal.

Official
Intermediate
Harvest-Forged-CodeHarvest-Forged-Code
10

security-audit

Audit codebases for OWASP Top 10 vulnerabilities, hardcoded secrets, and vulnerable dependencies.

Official
Advanced
ollieb89ollieb89

sast-configuration

Configures SAST tools like Semgrep, SonarQube and CodeQL for automated vulnerability detection in CI/CD pipelines.

Community
Advanced
ByronWilliamsCPAByronWilliamsCPA

security

Automates security validation for Python projects, including vulnerability scans and encrypted file management.

Official
Advanced