reviewing-security

SQL injection and XSS vulnerabilities occur when untrusted input reaches SQL queries or HTML output without sanitization. This Skill analyzes code for these OWASP Top 10 risks, flagging unsafe patterns in queries, string concatenation, and output rendering, then provides remediation steps aligned to secure coding standards.

An OWASP-based security review examines access control, authentication, cryptography, injection attacks, and misconfiguration across web, backend, and API components. This Skill loads OWASP references and produces findings with severity levels and remediation guidance for each vulnerability category.

Yes. This Skill performs security audits across web, backend, and API components, detecting access control flaws, authentication weaknesses, injection risks, and configuration errors. It applies OWASP Top 10 checks to identify and remediate vulnerabilities in all three contexts.

Authentication and access control flaws arise from weak credential handling, missing authorization checks, and privilege escalation paths. This Skill scans for these OWASP patterns, verifies cryptographic practices, and outputs findings with specific remediation guidance for each vulnerability.

Injection prevention requires parameterized queries, input validation, and output encoding. This Skill detects SQL, NoSQL, and command injection vulnerabilities in code, recommends secure alternatives, and provides OWASP-aligned remediation steps to eliminate injection risks.

Yes. Beyond injection and access control, this Skill identifies logging and monitoring gaps, insecure defaults, and configuration mistakes. It produces OWASP-aligned findings with severity and remediation guidance to close security posture gaps in your codebase.