security-review

To run a security audit on your codebase, you can use this skill to automate OWASP Top 10 checks, secrets detection, and dependency scanning. It delegates analysis to generate a structured report with severities and remediation guidance.

To detect hardcoded secrets in your repository, this skill performs automated secrets detection across the codebase. It identifies exposed tokens and keys, then includes them in a structured security report with file locations.

You can check your project for OWASP Top 10 vulnerabilities automatically using this skill. It applies checks across your repository and returns an assessment of your overall security posture with specific file and line locations.

To scan outdated dependencies for known vulnerabilities, this skill performs dependency security scanning across your repository. It returns a security report including applicable CVE references and guidance for remediation.

This security audit does provide specific file and line locations for identified vulnerabilities. The generated security report includes severity-by-issue details, exact locations, CVE references, and remediation steps.

The best way to assess input validation and authentication is using this skill to review sanitization and evaluate secure access controls. It returns an overall security posture assessment with actionable remediation guidance.