skills.rest
chtugha
chtughaCOMMUNITY
Explore all skills by this author →
GitHub

security-review

Identify security vulnerabilities in code changes and pull requests using OWASP Top 10 standards.

Updated May 7, 2026
Search Tags:#code review#OWASP#security audit#vulnerability scan#PR security
One-click install
npx skills add https://github.com/chtugha/brassclaw --skill security-review-chtugha
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/chtugha/brassclaw/tree/main/skills/security-review
Command: npx skills add https://github.com/chtugha/brassclaw --skill security-review-chtugha

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill automates security audits for code changes and pull requests, identifying potential vulnerabilities like OWASP top 10, authentication flaws, and secrets exposure.

Core Features & Use Cases

  • Automated Security Review: Identifies and reports security vulnerabilities in code changes.
  • OWASP Top 10 Checks: Scans for common security issues as per the OWASP top 10 list.
  • Integration: Can be used before merging PRs and as part of a review readiness pipeline.
  • Actionable Findings: Writes findings as actionable items with concrete fixes.

Quick Start

Run the security-review skill with the keyword 'security review' to perform an audit on the latest code changes.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate a security audit for a pull request?▼

Automated security audits scan code changes in pull requests to identify vulnerabilities like OWASP top 10 issues and secrets exposure. This Skill integrates into code review workflows to output actionable findings with concrete fixes before merging.

What is an automated OWASP top 10 check for code changes?▼

An automated OWASP top 10 check scans code changes to identify common security vulnerabilities like authentication flaws and secrets exposure. It analyzes code and PR content, outputting a report of potential security issues along with concrete remediation steps.

Can I use an automated security review to find secrets exposure in my code?▼

Yes, automated security review tools analyze code changes and pull requests to identify security vulnerabilities including secrets exposure and authentication flaws. They generate reports with actionable findings and concrete fixes to remediate the identified issues.

What is the best way to integrate vulnerability scanning into a PR readiness pipeline?▼

Integrating automated security audits into your PR readiness pipeline scans code changes for OWASP top 10 vulnerabilities and authentication flaws. This generates actionable findings with concrete fixes, ensuring vulnerabilities are remediated before merging.

Does automated code review find authentication flaws and other OWASP vulnerabilities?▼

Yes, automated security audits analyze code and PR content to find authentication flaws and other OWASP top 10 vulnerabilities. The review process outputs a report of potential security issues paired with actionable items and concrete remediation steps.

Related Skills

Explore More Software Engineering Skills→
HyperionBurnHyperionBurn

security-scan

Scan code changes for secrets, dependency vulnerabilities, and auth issues.

Community
Intermediate
brolagbrolag
11

overseer

Review code diffs and pull requests with structured checklists and remediation steps.

Community
Advanced
xvawlxvawl
1

pre-merge-checklist

Validate Python and TypeScript PRs against linting, typing, tests, and documentation.

Community
Intermediate
netresearchnetresearch
51

security-audit

Detect security vulnerabilities in PHP applications and score risks with CVSS v3.1.

Official
Advanced