Automate security review checks across application development phases.
npx skills add https://github.com/bytetalent/docs --skill security-review-bytetalent
Please help me install this Agent Skill. Skill: Security Review Source: https://github.com/bytetalent/docs/tree/main/skills/security/security-review Command: npx skills add https://github.com/bytetalent/docs --skill security-review-bytetalent
This Skill automates security review checks across different phases, ensuring code and infrastructure are free from common vulnerabilities and ensuring compliance with security standards.
Run the Security Review Skill on your latest code commit to detect security issues.
High-intent search queries and answers about installing and using this skill.
Automate security review checks by running scripts against your code repositories and architectural documents to identify vulnerabilities like secret exposure and authentication failures across development phases.
The security review detects issues including secret exposure, incorrect credential access, input validation errors, output encoding errors, and authentication failures to ensure infrastructure safety and compliance.
Yes, conducting infrastructure security checks requires access to your code repositories and the ability to execute scripts and read architectural documents for comprehensive vulnerability detection.
Yes, vulnerability detection checks can be applied during production review, architectural review, and code generation phases to ensure a security-first approach against threats.
The best way to ensure compliance is to run automated security reviews across all application development phases, verifying that code and infrastructure are free from common vulnerabilities and aligned with security standards.
ISAQQSAIExecute automated code review checks and output categorized feedback with severity levels.
bostonaholicAudit code changes for OWASP Top 10 vulnerabilities and severity.
vix-4800Identify defects, security issues, and architectural risks in code diffs.
voidrotConfigure SAST tools like Semgrep, CodeQL, and SonarQube for CI/CD pipelines.
