security-review

Scanning a codebase for hard-coded secrets and vulnerabilities involves analyzing source code to identify exposed keys and unsafe patterns. This skill automates secret detection and input validation checks to prevent insecure code from shipping during development and CI.

Enforcing input validation requires checking user inputs against strict patterns and sanitizing them before processing. This skill identifies unsafe input handling and enforces safe file operations to protect against directory traversal and related codebase vulnerabilities.

Automating security checks for vulnerable dependencies during code reviews is fully supported. This skill applies dependency security checks and compliance enforcement to flag insecure patterns and prevent leaks before merging codebase changes.

The security review process generates audit-ready reports detailing detected vulnerabilities, secrets exposure, and input validation weaknesses. These reports document codebase compliance and dependency security checks for review tracking.

Automated vulnerability detection is needed during development, continuous integration, and code reviews to prevent leaks. Running security checks at these stages catches hard-coded keys, unsafe input handling, and vulnerable dependencies before they reach production.