skills.rest
enchantednatures
enchantednaturesCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

security-review

Identify and remediate security vulnerabilities in code with structured review templates.

Updated May 7, 2025
Search Tags:#security#vulnerability#compliance#risk-assessment#threat-modeling#code-review#secure-coding
One-click install
npx skills add https://github.com/enchantednatures/.dotfiles --skill security-review-enchantednatures
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/enchantednatures/.dotfiles/tree/main/.config/opencode/skills/security-review
Command: npx skills add https://github.com/enchantednatures/.dotfiles --skill security-review-enchantednatures

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill provides a structured approach to security review, enabling teams to systematically identify and remediate vulnerabilities during code assessment and reviews.

Core Features & Use Cases

  • Threat modeling guidance to anticipate security risks early in the development cycle.
  • Comprehensive checklists covering input validation, authentication, authorization, data protection, and dependency security.
  • Reproducible review workflow that can be applied to pull requests, feature branches, and deployment pipelines in web and backend services.

Quick Start

Run a security review following the checklist and templates included in this Skill before merging code changes.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I conduct a security review for code changes before merging?▼

A security review systematically identifies and remediates vulnerabilities in pull requests and feature branches using structured checklists and templates covering input validation, authentication, authorization, and data protection.

What is threat modeling in secure coding and when do I need it?▼

Threat modeling anticipates security risks early in the development cycle by evaluating potential attack vectors. It is needed before merging code changes to ensure comprehensive risk assessment and documented remediation steps.

Can I apply a security vulnerability review to both web and backend services?▼

Yes, this structured security review is applicable across web and backend services, covering deployment pipelines and feature branches with reproducible workflows for consistent vulnerability identification and remediation.

How do I check for dependency security issues during a code review?▼

Dependency management is a core component of the security review checklist, ensuring that vulnerable libraries and packages are identified and remediated systematically before deployment.

What's the best way to ensure consistent secure coding practices across teams?▼

Using a structured security review with comprehensive templates and checklists ensures consistent secure coding practices, providing reproducible workflows for threat modeling, risk checks, and documented remediation across all code assessments.

Related Skills

Explore More Software Engineering Skills→
williamzujkowskiwilliamzujkowski
17

threat-modeling

Apply STRIDE threat modeling and DREAD prioritization to identify security threats.

Community
Advanced
JFrangelJFrangel

security-guard

Detects and remediates security vulnerabilities in code, infrastructure, and architecture using OWASP and DevSecOps standards for pre-production environments.

Community
Advanced
AutomatedMarketerAutomatedMarketer

security-reviewer

Scan application code, configuration, and dependencies for security vulnerabilities.

Community
Advanced
qazuorqazuor

security-audit

Perform security audits covering OWASP Top 10, threat modeling, and code review.

Community
Advanced