review-security

Audit software projects for dependencies, secrets, CVEs, and authentication patterns.

Updated Apr 6, 2026
One-click install
npx skills add https://github.com/ResearchMonkey/Foundation_template --skill review-security-researchmonkey
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: review-security
Source: https://github.com/ResearchMonkey/Foundation_template/tree/main/.claude/skills/review-security
Command: npx skills add https://github.com/ResearchMonkey/Foundation_template --skill review-security-researchmonkey

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Security gaps in software projects can lead to data breaches, compliance failures, and costly remediation. A holistic security audit helps identify and fix weaknesses before they cause incidents.

Core Features & Use Cases

  • OWASP dependency check identifies vulnerable libraries and transitive dependencies.
  • Secrets scan detects leaked API keys, tokens, and credentials in code and configs.
  • CVE audit tracks known vulnerabilities and prioritizes fixes.
  • Auth pattern review assesses authentication and access-control design for common weaknesses.
  • Governance compliance ensures policies and controls are enforced across CI/CD.

Quick Start

Run a full security sweep against the project context using the default configuration.

Frequently Asked Questions about review-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a full security audit on my codebase to check for vulnerabilities?

Run a full security audit to assess your project's security posture across dependencies, credentials, and authentication patterns. It enforces OWASP dependency checks, secrets scanning, CVE auditing, and governance compliance.

What is the best way to scan for leaked API keys and secrets in my project?

A secrets scan detects leaked API keys, tokens, and credentials in code and configs as part of a full-spectrum security audit. This identifies and helps fix credential weaknesses before they cause security incidents.

How do I track known vulnerabilities and prioritize fixes in my dependencies?

A CVE audit tracks known vulnerabilities and prioritizes fixes by assessing your software project's security posture. It integrates with OWASP dependency checks to identify vulnerable libraries and transitive dependencies.

Can I use this security audit for periodic governance reviews and PR checks?

Yes, the security audit applies to periodic governance reviews, PR security checks, and ongoing risk management. It ensures governance compliance by verifying policies and controls are enforced across CI/CD pipelines.

How does authentication pattern review work during a security audit?

Authentication pattern review assesses authentication and access-control design for common weaknesses during a security audit. It identifies potential vulnerabilities in your project's access management before they lead to breaches.

Why do I need a holistic security audit for my software project?

A holistic security audit identifies and fixes security gaps before they lead to data breaches, compliance failures, and costly remediation. It provides full-spectrum protection across dependencies, credentials, and authentication patterns.