security-review

Detects project environment and delegates to specialized security sub-skills.

Updated Apr 19, 2026
One-click install
npx skills add https://github.com/do360now/security-agents --skill security-review-do360now
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/do360now/security-agents/tree/main/.claude/skills/security-review
Command: npx skills add https://github.com/do360now/security-agents --skill security-review-do360now

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) and scripts (resource) components.

What problem does it solve?

This Skill enables automated, domain-specific security reviews by orchestrating targeted sub-skills, streamlining security assessments for various system components.

Core Features & Use Cases

  • Target Detection: Analyzes project structure to identify whether the codebase is a web app, API, cloud infrastructure, or other environment.
  • Delegated Analysis: Loads and applies specialized security sub-skills based on detected context, such as web security or cloud configuration review.
  • Use Case: When auditing a web application, this Skill automatically activates the owasp-top-10-web subskill to identify common vulnerabilities, saving time and improving coverage.

Quick Start

Input the project folder or code repository into the security agent and let the Skill detect the environment, load the appropriate review module, and generate a comprehensive security assessment report.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate security vulnerability assessment for a coding project?

Automate security vulnerability assessment by inputting the project folder into the agent. It detects the environment type, delegates to specialized sub-skills for targeted vulnerability analysis, and generates a comprehensive security assessment report.

What is automated security orchestration for code review?

Automated security orchestration for code review coordinates comprehensive assessments by analyzing project structures, detecting domains like web apps or cloud infrastructure, and delegating to specialized sub-skills to enforce best practices and compliance checks.

Does security review work with cloud infrastructure and API setups?

Security review works with cloud infrastructure and API setups by applying automatic environment detection. It loads specialized security sub-skills based on the detected context to perform targeted vulnerability analysis and compliance checks.

How do I run an OWASP top 10 web application audit automatically?

Run an OWASP top 10 web application audit automatically by letting the environment detection identify the web app context. It activates the owasp-top-10-web subskill to identify common vulnerabilities and streamline the assessment.

What's the best way to coordinate domain-specific security checks across a repository?

Coordinate domain-specific security checks across a repository by orchestrating specialized sub-skills. The system analyzes the project structure to identify the environment and applies targeted vulnerability analysis and best-practice enforcement.

Do I need to manually select security sub-skills for different system components?

You do not need to manually select security sub-skills. The system automatically detects the environment from the project structure and loads the appropriate review module, such as web security or cloud configuration review, automatically.