security-review

Audit code changes for OWASP Top 10 security risks and compliance.

22|6|Updated Mar 10, 2026
One-click install
npx skills add https://github.com/felvieira/claude-skills-fv --skill security-review-felvieira
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/felvieira/claude-skills-fv/tree/main/skills/06-security-review
Command: npx skills add https://github.com/felvieira/claude-skills-fv --skill security-review-felvieira

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

The Security Reviewer acts as the final gate before deployment; nothing goes to production without a thorough security review.

Core Features & Use Cases

  • Audits authentication, authorization, headers, and data handling to ensure secure defaults and risk mitigation.
  • OWASP Top 10 coverage, secure headers, CSP, and secure configuration validation with clear findings.
  • Handoff workflow to Deployer or corrective skills, with governance docs and remediation guidance.

Quick Start

Identify and audit the latest code changes for security gaps and generate a prioritized remediation plan.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check my code changes for OWASP Top 10 vulnerabilities before deployment?

The best way to perform a pre-deploy security review is to audit recent code changes against OWASP Top 10 standards, checking authentication, authorization, headers, and data handling to produce prioritized remediation guidance.

What is a pre-deploy security review and what does it cover?

A pre-deploy security review is a final compliance gate that audits code changes for OWASP Top 10 risks across authentication, authorization, secure headers, CSP, CSRF, and secure logging to provide structured findings and mitigations.

Can I use this security review to audit authentication and authorization logic?

Yes, this security review audits authentication, authorization, and data handling to ensure secure defaults and risk mitigation, while also validating secure headers, CSP, and configurations against OWASP standards.

How do I validate secure headers and CSP during a code review?

To validate secure headers and CSP during a code review, enforce checks for misconfigurations, CSP, CSRF, and secure logging, which generates structured findings and prioritized remediation guidance for compliance.

Does the security review provide remediation guidance for identified vulnerabilities?

Yes, the security review provides structured findings and mitigation guidance for identified vulnerabilities, generating a prioritized remediation plan along with governance docs for handoff to deployer or corrective workflows.

What are the limitations of relying solely on OWASP Top 10 for vulnerability checks?

Relying solely on OWASP Top 10 for vulnerability checks limits coverage to standard risks like authentication, authorization, headers, and data handling, potentially missing undocumented business logic flaws or complex dependency risks.