skills.rest
vanillacake369
vanillacake369COMMUNITY
Explore all skills by this author →
Website𝕏@tonyluvvanillaGitHub

security-review

Identify security vulnerabilities in codebases with prioritized remediation guidance.

2|Updated Mar 15, 2025
Search Tags:#code review#performance#OWASP#security#vulnerability#audit#quality
One-click install
npx skills add https://github.com/vanillacake369/tonys-nix --skill security-review
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/vanillacake369/tonys-nix/tree/main/dotfiles/claude/skills/security-review
Command: npx skills add https://github.com/vanillacake369/tonys-nix --skill security-review

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill systematically identifies security vulnerabilities, performance bottlenecks, and code quality issues, providing actionable, context-aware recommendations. It saves significant time on manual reviews and ensures a more secure, efficient, and maintainable codebase, allowing you to rest assured your code is robust.

Core Features & Use Cases

  • Systematic Vulnerability Analysis: Scans for OWASP Top 10 risks, injection flaws, access control issues, and cryptographic weaknesses, tailored to the project's specific tech stack.
  • Performance & Quality Assessment: Reviews algorithm efficiency, database queries, resource management, and code consistency, offering targeted optimizations and refactoring suggestions.
  • Domain-Specific Considerations: Adapts the review process to specific industry risks (e.g., financial precision for banking, HIPAA compliance for healthcare systems).
  • Use Case: Before a major release, use this Skill to perform a comprehensive security audit on your new payment processing module. It will identify potential SQL injection points, ensure proper data encryption, and suggest performance improvements for critical transactions.

Quick Start

Perform a security and performance review of the OrderProcessingService module, focusing on potential SQL injection vulnerabilities and N+1 query issues.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I identify security vulnerabilities in my codebase?▼

Security vulnerability identification scans code for OWASP Top 10 risks, injection flaws, access control issues, and cryptographic weaknesses tailored to your tech stack. The Skill performs systematic analysis across web, backend, and library projects, returning prioritized remediation guidance aligned with your project's compliance needs.

Can I use security audits for authentication and data protection issues?▼

Yes. The Skill covers authentication, authorization, input validation, data protection, and misconfigurations across web, backend, and library projects. It applies domain-specific considerations for industry risks like HIPAA compliance for healthcare or financial precision for banking systems.

How do I find SQL injection vulnerabilities and N+1 query problems?▼

Security and performance analysis examines potential SQL injection points, database query efficiency, and N+1 query issues within your codebase. The Skill returns actionable optimization suggestions for algorithm efficiency, resource management, and critical transaction performance.

What does a comprehensive code security review include?▼

A comprehensive review employs phased workflow: context analysis, security examination, performance analysis, and quality assessment. It identifies vulnerabilities, performance bottlenecks, and code quality issues, providing context-aware recommendations for a secure, efficient, and maintainable codebase.

Does this approach work for backend and library projects?▼

Yes. The Skill applies across web, backend, and library projects with systematic vulnerability analysis tailored to specific tech stacks. It adapts the review process to domain-specific risks and ensures actionable, prioritized remediation guidance for your project type.

What's the best way to perform a security audit before a major release?▼

Execute a phased security and performance review covering OWASP Top 10 risks, injection flaws, access control, cryptographic weaknesses, algorithm efficiency, and database queries. The Skill returns prioritized remediation guidance aligned with your tech stack and compliance needs for confident, robust releases.

Related Skills

Explore More Software Engineering Skills→
gdurandvadasgdurandvadas
2

role-security-auditor

Identify OWASP Top 10 vulnerabilities and report severity with remediation guidance.

Community
Advanced
CaptainCrouton89CaptainCrouton89
497

Auditing Security

Identify and remediate security vulnerabilities with CVSS scores and OWASP Top 10 mappings.

Community
Basic
skenklokskenklok

security-audit

Audit codebases for security vulnerabilities and output prioritized remediation guidance.

Community
Advanced
christopherlouetchristopherlouet
5

qa-security

Audit codebases for OWASP top 10 security vulnerabilities.

Community
Advanced