skills.rest
eszxcvfd
eszxcvfdCOMMUNITY
Explore all skills by this author →
GitHub

security-review

Identify security vulnerabilities and generate prioritized remediation guidance.

Updated Mar 10, 2026
Search Tags:#security#authentication#owasp#dependencies#audit#secrets#vulnerabilities
One-click install
npx skills add https://github.com/eszxcvfd/ANIZAKI --skill security-review-eszxcvfd
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/eszxcvfd/ANIZAKI/tree/main/.agents/skills/security-review
Command: npx skills add https://github.com/eszxcvfd/ANIZAKI --skill security-review-eszxcvfd

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Helps teams detect and remediate security weaknesses early by running structured security reviews across codebases, reducing risk exposure.

Core Features & Use Cases

  • OWASP Top 10 checks across new or updated codepaths
  • Secrets detection for hardcoded credentials and keys
  • Input validation review and guidance to prevent injection attacks
  • Authentication/authorization review and secure session handling
  • Dependency security scanning and guidance on upgrades
  • Report-ready output with remediation steps and risk rating

Quick Start

Run a full security review on your repository to generate a prioritized remediation report.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a security audit on my codebase to check for OWASP Top 10 vulnerabilities?▼

To perform a security audit on your codebase, you can run a structured review that checks new or updated codepaths against the OWASP Top 10. This generates a prioritized remediation report with actionable guidance and risk ratings.

How do I detect hardcoded secrets and credentials in my source code?▼

Detecting hardcoded secrets in your source code is achieved through a structured security review that scans for credentials and keys. The process identifies exposed secrets and provides remediation steps to secure your codebase.

Can I review authentication and authorization logic for secure session handling?▼

Yes, you can review authentication and authorization logic for secure session handling. A comprehensive security assessment evaluates these changes to ensure proper access controls and session management across your project.

What is the best way to scan project dependencies for known vulnerabilities?▼

The best way to scan project dependencies for known vulnerabilities is via an end-to-end security assessment. This dependency scanning identifies at-risk packages and delivers guidance on necessary upgrades to reduce risk exposure.

How does input validation review prevent injection attacks in a codebase?▼

Input validation review prevents injection attacks by analyzing codepaths for improper data handling. The security audit inspects how inputs are processed and provides guidance to block malicious payloads from exploiting your application.

Related Skills

Explore More Software Engineering Skills→
ClearMeasureLabsClearMeasureLabs
3

run-semgrep

Run SemGrep static analysis and security audits on C# source code.

Official
Intermediate
jeremylongshorejeremylongshore
2.6k

scanning-for-vulnerabilities

Scan codebases, dependencies, and configurations for security vulnerabilities and CVEs.

Community
Intermediate
EdgeHuntEdgeHunt

ck:security-scan

Scan codebases for hardcoded secrets, dependency issues, and vulnerability patterns.

Official
Intermediate
rauly-1408rauly-1408

agentic-actions-auditor

Audit GitHub Actions workflows for AI agent security vulnerabilities.

Community
Advanced