Automate code review for security vulnerabilities and OWASP best practices.
npx skills add https://github.com/eykd/vance-ts --skill security-review-eykd
Please help me install this Agent Skill. Skill: security-review Source: https://github.com/eykd/vance-ts/tree/main/.claude/skills/security-review Command: npx skills add https://github.com/eykd/vance-ts --skill security-review-eykd
This Skill provides a systematic approach to reviewing code for security vulnerabilities and best practices, helping developers harden their applications against potential threats.
Run the security-review skill to start reviewing your code for potential security vulnerabilities.
High-intent search queries and answers about installing and using this skill.
To automate a security review for web application code, this Skill systematically scans for vulnerabilities and enforces OWASP guidelines. It identifies security surfaces like authentication and data handling, then outputs actionable fixes for secure coding patterns and defense-in-depth principles.
A code audit for OWASP vulnerabilities checks your application against common security threats and best practices. This process involves identifying critical patterns, validating inputs, ensuring proper security headers, and providing reference materials for mitigating identified risks.
Yes, this security review provides framework-specific guidance tailored to various platforms and frameworks. It ensures vulnerability assessment results include prioritized findings and actionable fixes relevant to the specific technologies used in your web application.
To check your codebase for missing security headers and input validation, the review process highlights critical patterns that must be flagged. It evaluates secure coding patterns against defense-in-depth principles and outputs a clear, concise report on necessary fixes.
Before running an automated secure coding review, you need knowledge of common security vulnerabilities and mitigation strategies. The review requires no external dependencies but applies OWASP guidelines to identify security surfaces and provide framework-specific guidance.
Bsh13lderEnumerate subdomains, verify live hosts, collect URLs, and scan for vulnerabilities.
marcoamuAudit web and API codebases for OWASP Top 10 vulnerabilities and generate remediation plans.
devendrapratapsinghScan application code for vulnerabilities and hardcoded secrets.
uphiagoDetect FastAPI-specific vulnerabilities including OpenAPI schema exposure and DI authorization gaps.
