security_review_baseline

Identify OWASP risks and misconfigurations via grep-based security checks.

Updated Aug 27, 2026
One-click install
npx skills add https://github.com/denish12/codex-ai-agent-and-skills --skill security-review-baseline
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security_review_baseline
Source: https://github.com/denish12/codex-ai-agent-and-skills/tree/main/locales/en/.agents/skills/security_review_baseline
Command: npx skills add https://github.com/denish12/codex-ai-agent-and-skills --skill security-review-baseline

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

The Quick Security Review Baseline helps teams identify common OWASP risks and configuration gaps early in the software lifecycle, reducing the chance of production issues.

Core Features & Use Cases

  • Baseline security checklist covering secrets, validation, auth, and common web risks.
  • Automated scan prompts and reference material to guide quick reviews.
  • Produce a standardized findings report for fast remediation and stakeholder communication.

Quick Start

Invoke the Security Review Baseline by running the $security_review trigger to perform a quick baseline assessment.

Frequently Asked Questions about security_review_baseline

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a baseline security review for OWASP risks?

A baseline security review for OWASP risks evaluates secrets handling, input validation, authentication, and SSRF/XSS/CSRF protections using a structured checklist. It generates a standardized findings report for fast remediation.

What is included in a pre-release web application security checklist?

A pre-release security checklist covers secrets handling, input validation, authentication checks, SSRF/XSS/CSRF protections, and logging hygiene. It identifies configuration gaps early to reduce production issues.

Can I automate OWASP security audits using grep-based checks?

Yes, you can automate security audits using grep-based checks to scan codebases. The review process supports automated scan prompts to quickly identify misconfigurations and common web risks during development sprints.

Does this baseline security audit cover XSS and CSRF protections?

Yes, the baseline security audit explicitly covers XSS and CSRF protections alongside SSRF, authentication checks, and logging hygiene. It enforces a structured checklist to identify these common OWASP web risks.

What's the best way to check for secrets and misconfigurations before a release?

The best way to check for secrets and misconfigurations before a release is running a baseline security review. It enforces a structured checklist and outputs a consistent findings template for stakeholder communication.

When do I need to run a baseline security review during development?

Run a baseline security review during code sprints or before releases to quickly assess OWASP risks. It identifies secrets handling and validation gaps early in the software lifecycle, preventing production issues.