secure-coding-review

Review source code for OWASP Top 10 vulnerabilities and hardcoded secrets.

Updated Feb 3, 2026
One-click install
npx skills add https://github.com/dhruvinrsoni/agentskills-garden --skill secure-coding-review
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: secure-coding-review
Source: https://github.com/dhruvinrsoni/agentskills-garden/tree/main/skills/60-security/secure-coding-review
Command: npx skills add https://github.com/dhruvinrsoni/agentskills-garden --skill secure-coding-review

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill proactively identifies and flags security vulnerabilities within code, preventing potential breaches and ensuring robust application security.

Core Features & Use Cases

  • OWASP Top 10 Scanning: Detects common web application security risks.
  • Secret Detection: Finds hardcoded credentials and sensitive information.
  • Language-Specific Checks: Catches common security pitfalls in popular programming languages.
  • Use Case: Before merging a new feature, run this Skill to ensure no sensitive data is exposed and that the code adheres to secure coding practices, preventing costly security incidents.

Quick Start

Run a secure coding review on the files in the 'src/' directory.

Frequently Asked Questions about secure-coding-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan source code for OWASP Top 10 vulnerabilities before merging?

To scan source code for OWASP Top 10 vulnerabilities, review application files to detect injection flaws, broken authentication, and sensitive data exposure. This process provides severity-classified findings and remediation guidance to ensure robust secure coding practices before merging new features.

What is the best way to detect hardcoded secrets and sensitive data exposure in my application?

Secrets detection for hardcoded credentials and sensitive data exposure is best handled by scanning application source code for common security anti-patterns. This review identifies exposed credentials and provides severity-classified findings with actionable remediation guidance.

Can I use this secure coding review for multiple programming languages?

Yes, secure coding review supports multiple programming languages by catching common security pitfalls and language-specific vulnerabilities. It evaluates source code across different languages to detect insecure configurations, injection flaws, and broken authentication.

How does vulnerability scanning identify insecure configurations and common security anti-patterns?

Vulnerability scanning identifies insecure configurations and security anti-patterns by analyzing source code against established OWASP Top 10 risks and language-specific pitfalls. It detects injection flaws and broken authentication, outputting severity-classified findings with targeted remediation guidance.

What are the limitations of automated code review for finding security vulnerabilities?

Automated code review for security vulnerabilities focuses on detecting known OWASP Top 10 risks, hardcoded secrets, and language-specific pitfalls. It provides severity-classified findings and remediation guidance, but may not catch complex, novel, or business-logic vulnerabilities outside established anti-patterns.