security-review

Audit code changes against OWASP Top 10 and API Security Top 10 standards.

2|Updated Jan 30, 2026
One-click install
npx skills add https://github.com/amdmax/claude_marketplace --skill security-review-amdmax
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/amdmax/claude_marketplace/tree/main/.claude/skills/review%3Asecurity
Command: npx skills add https://github.com/amdmax/claude_marketplace --skill security-review-amdmax

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill proactively identifies critical security vulnerabilities in your codebase, aligning with OWASP Top 10 and API Security standards to prevent breaches before they happen.

Core Features & Use Cases

  • Comprehensive Scanning: Analyzes code against OWASP Top 10 (2025) and API Security Top 10 (2023) checklists.
  • Vulnerability Reporting: Provides detailed findings with severity, file location, and remediation steps.
  • Use Case: Before committing code, run this skill to automatically detect and fix potential injection flaws, broken access control, or insecure configurations, ensuring a more secure release.

Quick Start

Run a security review on the code changes in the current Git branch.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan code for OWASP Top 10 vulnerabilities before a release?

To scan code for OWASP Top 10 vulnerabilities, you can run a security review on your current Git branch. The audit identifies injection flaws, broken access control, and misconfigurations, providing severity levels and remediation guidance.

What is the best way to detect API security flaws in code changes?

The best way to detect API security flaws is auditing code changes against the API Security Top 10 checklist. This process identifies broken access control and cryptographic failures, outputting detailed reports with file locations and remediation steps.

Can I automatically identify injection and access control flaws in web applications?

Yes, you can automatically identify injection and broken access control flaws in web applications. The security audit analyzes your code changes against standard checklists to prevent breaches before they happen.

Does this security audit support compliance reporting for web applications and APIs?

Yes, the security audit supports compliance reporting for web applications and APIs. It provides detailed findings with severity levels, file locations, and remediation steps aligned with OWASP Top 10 and API Security Top 10 standards.

When do I need to run a security review on my codebase?

You need to run a security review on your codebase before committing code. This proactively identifies critical security vulnerabilities, ensuring a more secure release by detecting potential flaws early in the development cycle.