security-review

Name: security-review
Availability: InStock
Author: AIMS

Identify and remediate OWASP Top 10 security vulnerabilities in codebases.

Updated Jan 7, 2026

Search Tags:#authorization #security #authentication #owasp #review #vulnerabilities #vulnerability-report

Ready to run

npx skills add https://github.com/aimskr/aims-claude-toolkit --skill security-review-aimskr

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/aimskr/aims-claude-toolkit/tree/main/skills/security-review
Command: npx skills add https://github.com/aimskr/aims-claude-toolkit --skill security-review-aimskr

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Identifies security vulnerabilities and design flaws in codebases using OWASP Top 10 guidance to help teams reduce risk before deployment.

Core Features & Use Cases

Phase-based security review workflow covering scope assessment, OWASP Top 10 checks, vulnerability reporting, and security design recommendations.
Generates actionable vulnerability reports and remediation guidance for authentication, authorization, and data handling.
Useful for pre-deployment security checks, code audits, and security design reviews across languages and frameworks.

Quick Start

Provide your target codebase to initiate an OWASP-based security review and generate a Security Review Report.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I perform an OWASP Top 10 security review on my codebase?▼

An OWASP Top 10 security review systematically identifies codebase vulnerabilities using a structured workflow. It assesses scope, checks against OWASP guidelines, and generates a Security Review Report with actionable remediation guidance for pre-deployment risk reduction.

What is the best way to check for authentication and authorization vulnerabilities before deployment?▼

Checking authentication and authorization vulnerabilities requires a structured security review using OWASP guidance. It evaluates design flaws in data handling and access control, outputting a vulnerability report with specific remediation steps to resolve issues before deployment.

Can I use this security review workflow across different programming languages and frameworks?▼

Yes, this security review workflow is applicable across multiple programming languages and frameworks. It uses general OWASP Top 10 guidance to audit code and design patterns, ensuring broad vulnerability detection and security design recommendations regardless of stack.

What does a Security Review Report include when auditing code for vulnerabilities?▼

A Security Review Report includes identified vulnerabilities, detailed design flaws, and actionable remediation guidance. It covers authentication, authorization, and data handling issues found during the OWASP Top 10 checks, providing clear steps for developers to reduce risk.

How do I identify security design flaws during a code audit?▼

Identifying security design flaws during a code audit involves a phase-based vulnerability review workflow. It checks authentication and authorization mechanisms against the OWASP-CHECKLIST.md, allowing teams to detect and remediate structural risks before deployment.

Does this security review check cover all OWASP Top 10 vulnerabilities automatically?▼

This security review systematically guides you through OWASP Top 10 checks to identify vulnerabilities. By analyzing the provided codebase, it generates a vulnerability report covering common risks like authentication failures and design flaws across languages and frameworks.