Review source code for security vulnerabilities with CWE mappings and concrete fixes.
npx skills add https://github.com/mahg-es/araya --skill secure-code
Please help me install this Agent Skill. Skill: secure-code Source: https://github.com/mahg-es/araya/tree/main/skills/secure-code Command: npx skills add https://github.com/mahg-es/araya --skill secure-code
Review source code for security vulnerabilities following OWASP ASVS and CWE Top 25.
Run a security-focused code review on the provided source files to identify vulnerabilities and propose concrete fixes.
High-intent search queries and answers about installing and using this skill.
Run a security-focused code review on your source files to identify vulnerabilities based on OWASP ASVS and CWE Top 25. This process surfaces actionable findings with CWE mappings, severity ratings, and concrete remediation guidance for authentication and data access code.
The best way to fix CWE Top 25 vulnerabilities is to review authentication, input validation, and data access paths before merging security-sensitive PRs. This surfaces vulnerabilities and provides expert findings with concrete fixes aligned with secure-by-design practices.
Yes, you can receive concrete remediation guidance for input validation flaws. The review generates a structured report mapping each vulnerability to its CWE identifier, assigning a severity level, and proposing specific code fixes.
Threat modeling support aligns with secure-by-design practices by integrating expert vulnerability findings into the code review workflow. This ensures security flaws in sensitive areas like authentication and data access are identified and remediated before deployment.
Yes, this approach works for manual code review of authentication logic by applying OWASP ASVS standards to your source files. It evaluates security-sensitive code paths to deliver actionable findings with CWE mappings and recommended fixes.
A structured security vulnerability report includes actionable findings with CWE mappings, severity ratings, and concrete remediation guidance. It surfaces flaws detected in authentication, input handling, and data access code during the review process.
juburrApply structured review checklists to identify security risks in Go codebases.
WebWakaHubIdentify application security vulnerabilities and design flaws in software, APIs, and cloud infrastructure.
huangzidaEnforce secure coding practices for authentication, authorization, and data handling.
AmidVoshakulConduct security audits and risk assessments across application lifecycles and cloud infrastructure.
