security-review-2

Analyze dependencies, scan for secrets, and detect dangerous static code patterns.

Updated Aug 23, 2026

Search Tags:#code review #security #vulnerability #audit #dependency scanning #secret scanning

Ready to run

npx skills add https://github.com/btwitskaif69/Markify --skill security-review-2

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-review-2
Source: https://github.com/btwitskaif69/Markify/tree/main/.agent/.cursor/skills/security-review-2
Command: npx skills add https://github.com/btwitskaif69/Markify --skill security-review-2

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill helps identify and mitigate security vulnerabilities within codebases, ensuring a more robust and secure application.

Core Features & Use Cases

Dependency Analysis: Detects vulnerable packages in project dependencies.
Secret Scanning: Identifies hardcoded secrets or API keys that may have been exposed.
Static Analysis: Flags dangerous coding patterns that could lead to security flaws.
Use Case: Before deploying a new feature, run this skill to perform a comprehensive security audit and catch potential issues early.

Quick Start

Run a security review on the current project's codebase.

Frequently Asked Questions about security-review-2

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I audit code for vulnerabilities before deployment?▼

To audit code for vulnerabilities, you can run a multi-faceted security review that analyzes project dependencies, scans for hardcoded secrets, and identifies dangerous static code patterns to harden your application.

What does secret scanning look for in a codebase?▼

Secret scanning identifies hardcoded secrets or exposed API keys within your codebase by utilizing scanning utilities like grep or trivy to detect sensitive information before deployment.

How do I detect vulnerable packages in project dependencies?▼

You can detect vulnerable packages by performing dependency analysis, which requires integration with package auditing tools like npm audit or govulncheck to flag known vulnerabilities in your project dependencies.

Can I use this security review with any programming language?▼

The security review supports languages compatible with package auditing tools like npm audit or govulncheck, and requires static analysis capabilities to flag dangerous coding patterns specific to your codebase.

What is the best way to catch security anti-patterns during development?▼

The best way to catch security anti-patterns is using static analysis to flag dangerous coding patterns, combined with dependency analysis and secret scanning for a comprehensive security audit.

Do I need external tools to scan for hardcoded secrets?▼

Yes, you need external secret scanning utilities like grep or trivy to identify hardcoded secrets or API keys, as the security review integrates these tools to perform comprehensive vulnerability detection.