security-review

Analyze code for security vulnerabilities and provide OWASP Top 10 remediation guidance.

2|Updated Nov 4, 2025
One-click install
npx skills add https://github.com/bloknayrb/claudestuff --skill security-review-bloknayrb
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/bloknayrb/claudestuff/tree/main/skills/security-review
Command: npx skills add https://github.com/bloknayrb/claudestuff --skill security-review-bloknayrb

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps identify and fix security vulnerabilities in code, promoting secure coding practices and protecting against common threats.

Core Features & Use Cases

  • Vulnerability Detection: Analyzes code for common security flaws like injection attacks, broken authentication, and XSS.
  • Secure Coding Guidance: Provides examples and best practices for writing more secure code.
  • Use Case: A developer can use this Skill to review a new feature's code for potential security risks before deployment, ensuring compliance with security standards like OWASP Top 10.

Quick Start

Use the security-review skill to identify potential injection vulnerabilities in the provided Python code snippet.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I identify injection attacks and broken authentication vulnerabilities in my code?

Identify injection attacks by analyzing your code for common security flaws against OWASP Top 10 principles, which detects risks like injection attacks and broken authentication while providing secure coding remediation guidance.

What is the best way to perform a security review on a new feature before deployment?

The best way to perform a security review is to analyze the new feature's code for potential risks like XSS and insecure deserialization, ensuring compliance with OWASP Top 10 secure coding standards.

Can I use this approach to find insecure deserialization risks in Python code?

Yes, you can find insecure deserialization risks in Python code by analyzing the snippets for common programming language security pitfalls and applying targeted defensive coding techniques.

Does this security review method require penetration testing tools?

No, this security review method does not require penetration testing tools because it identifies vulnerabilities by analyzing the source code directly and providing remediation guidance based on secure coding practices.

When do I need secure coding practices and remediation guidance for XSS?

You need secure coding practices and remediation guidance for XSS when your code handles user input, requiring analysis for common security flaws to prevent injection attacks and ensure compliance.