security-review

Review code for injection, XSS, authentication, and cryptography vulnerabilities.

Updated Feb 15, 2026
One-click install
npx skills add https://github.com/aldy505/atrium --skill security-review-aldy505
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/aldy505/atrium/tree/main/.agents/skills/security-review
Command: npx skills add https://github.com/aldy505/atrium --skill security-review-aldy505

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps identify and fix security vulnerabilities in code, ensuring your applications are robust against common attacks.

Core Features & Use Cases

  • Vulnerability Detection: Scans code for common security flaws like injection, XSS, and insecure configurations.
  • Contextual Analysis: Researches code context to avoid false positives and provide actionable insights.
  • Use Case: You've written a new API endpoint and want to ensure it's secure before deployment. Use this Skill to audit the code for potential vulnerabilities like SQL injection or insecure authentication.

Quick Start

Use the security-review skill to audit the file 'src/utils/auth.py' for security issues.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a security code review to find vulnerabilities like SQL injection or XSS?

Perform a security code review by analyzing your source files for injection flaws, XSS, authentication, authorization, and cryptography issues using a systematic, confidence-based approach. This process leverages OWASP Cheat Sheet Series references to provide comprehensive vulnerability auditing.

What is the best way to audit an API endpoint for security flaws before deployment?

The best way to audit an API endpoint is to run a contextual security review that scans the code for common flaws like injection and insecure configurations. This approach researches code context to avoid false positives and provides actionable insights for fixing vulnerabilities.

Does security code review work with the OWASP Cheat Sheet Series for comprehensive auditing?

Yes, security code review works directly with the OWASP Cheat Sheet Series for comprehensive auditing. The review process actively leverages these references to systematically identify and report vulnerabilities across injection, XSS, and cryptography categories.

How does contextual analysis during a security audit help avoid false positives?

Contextual analysis during a security audit researches the surrounding code context to validate potential vulnerabilities, which helps avoid false positives. This ensures the reported security flaws are genuine and provides actionable insights for remediation.

Can I scan code for insecure authentication and authorization vulnerabilities?

Yes, you can scan code for insecure authentication and authorization vulnerabilities. The security review process systematically analyzes these specific areas alongside injection flaws and cryptography issues to ensure your application is robust against common attacks.