security-review

Execute security reviews of code repositories, configurations, and dependencies.

Updated Mar 23, 2026

Search Tags:#code review #security #vulnerability #configuration #dependency analysis #secrets detection

Ready to run

npx skills add https://github.com/disciplin-run-org/jjstack --skill security-review-disciplin-run-org

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/disciplin-run-org/jjstack/tree/main/skills/security-review
Command: npx skills add https://github.com/disciplin-run-org/jjstack --skill security-review-disciplin-run-org

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill streamlines comprehensive security assessments of codebases, configurations, and dependencies, helping teams identify vulnerabilities before deployment.

Core Features & Use Cases

Multi-source methodology integration: Combines industry standards from Anthropic, Sentry, OWASP, and custom jjstack assessments.
Automated deep code analysis: Detects secrets, misconfigurations, insecure dependencies, and common vulnerability patterns across full repositories.
Use Case: Conduct a pre-deployment security scan of a web application with detailed reporting on identified risks and mitigation recommendations.

Quick Start

Run the security review on your project directory to get a comprehensive vulnerability report.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I run a comprehensive security vulnerability review on my codebase?▼

Run a full-spectrum security review to execute static analysis, secret detection, and dependency checks across your codebase, configurations, and infrastructure to identify vulnerabilities before deployment.

What security standards and frameworks are used for code vulnerability analysis?▼

Code vulnerability analysis uses OWASP Top 10:2025, industry standards from Anthropic and Sentry, and custom MCP assessments to ensure comprehensive compliance and risk mitigation.

Can I detect hardcoded secrets and insecure dependencies during a pre-deployment security scan?▼

Yes, automated deep code analysis detects secrets, insecure dependencies, misconfigurations, and common vulnerability patterns across full repositories during a pre-deployment security scan.

Does the security audit work with infrastructure configurations and dependency files?▼

Yes, the security audit executes comprehensive static analysis on code repositories, infrastructure configurations, and dependencies to detect misconfigurations and address vulnerabilities.

What is the best way to identify misconfigurations and common vulnerability patterns in a project?▼

The best way to identify misconfigurations is running an automated deep code analysis that combines static analysis and secret detection to pinpoint common vulnerability patterns across your project.