security-review

Code review for vulnerabilities involves auditing changes against OWASP Top 10 patterns, checking authorization logic, input validation, and encryption implementation. This Skill automates vulnerability identification and provides remediation guidance aligned with secure coding standards.

OWASP Top 10 alignment ensures code addresses the most critical web application security risks: injection, broken authentication, sensitive data exposure, XML external entities, broken access control, security misconfiguration, cross-site scripting, insecure deserialization, using components with known vulnerabilities, and insufficient logging. This Skill enforces these standards during audits.

Yes. This Skill audits code changes to enforce authorization patterns, implement encryption, and validate data protection practices. It integrates with code analysis tools and provides pre-flight checklists and secure coding examples for consistent implementation.

Review PRs using security auditing to catch vulnerabilities in authentication, error handling, and input validation. This Skill annotates fixes for these areas and provides vulnerability scanning integration to surface risks before deployment.

Code review is manual inspection of logic and patterns; vulnerability scanning uses automated tools to detect known issues. This Skill combines both: it guides manual security review of code changes and integrates with scanning tools for comprehensive risk coverage.

This Skill integrates with standard development tools—Read, Write, Edit, Grep, Glob, Bash, and Task—to implement secure patterns without requiring additional security infrastructure. It provides practical checklists and code examples for authorization, encryption, and data protection.