security-review-criteria

Categorize software security vulnerabilities using OWASP Top 10 criteria.

Updated Aug 23, 2026
One-click install
npx skills add https://github.com/sato-dev1234/claude-code-sample --skill security-review-criteria
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-review-criteria
Source: https://github.com/sato-dev1234/claude-code-sample/tree/main/skills/security-review-criteria
Command: npx skills add https://github.com/sato-dev1234/claude-code-sample --skill security-review-criteria

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Provides a structured, repeatable set of security review criteria aligned to OWASP Top 10 to help teams identify, categorize, and remediate vulnerabilities across projects.

Core Features & Use Cases

  • Severity-driven analysis across Critical, High, Medium, and Low findings.
  • Comprehensive coverage mapping to OWASP Top 10 categories and common attack patterns.
  • Remediation guidance with concrete checks, examples, and best practices for secure design and implementation.

Quick Start

Assess a codebase by applying the OWASP criteria to known vulnerabilities and generate a prioritized remediation plan.

Frequently Asked Questions about security-review-criteria

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I identify security vulnerabilities using OWASP Top 10 criteria during code reviews?

To identify security vulnerabilities using OWASP Top 10 criteria during code reviews, apply severity-driven analysis across Critical, High, Medium, and Low findings. This maps known issues to common attack patterns and defines trust boundaries to standardize findings consistently.

What is the best way to standardize threat modeling risk profiles for web and API systems?

Standardizing threat modeling risk profiles for web and API systems requires applying structured OWASP Top 10 criteria to define severity levels, trust boundaries, and detection patterns. This produces consistent risk profiles and generates a prioritized remediation plan.

Can I generate a prioritized remediation plan for software vulnerabilities found in my codebase?

You can generate a prioritized remediation plan for software vulnerabilities by assessing a codebase against known issues using OWASP criteria. This applies severity-driven analysis to produce concrete checks and best practices for secure design and implementation.

Does this security review approach provide language-specific checks for secure implementation?

This security review approach provides language-specific checks for secure implementation alongside concrete examples and best practices. It defines detection patterns and trust boundaries to guide reviewers in categorizing vulnerabilities across web and API systems.

When do I need threat modeling and architecture reviews for API systems?

Threat modeling and architecture reviews for API systems are needed when you must identify and categorize security vulnerabilities across projects. Applying OWASP Top 10 criteria ensures consistent risk profiles and standardized findings for secure design.