security-review

Identify security weaknesses and generate prioritized reports with remediation guidance.

6|1|Updated Apr 16, 2026
One-click install
npx skills add https://github.com/Goblin1024/oh-my-kimi --skill security-review-goblin1024
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/Goblin1024/oh-my-kimi/tree/main/skills/security-review
Command: npx skills add https://github.com/Goblin1024/oh-my-kimi --skill security-review-goblin1024

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Security reviews are time-consuming and error-prone; this Skill provides an automated, structured approach to audit code for OWASP Top 10 issues, secrets, and insecure patterns.

Core Features & Use Cases

  • OWASP Top 10 scan
  • Secrets detection
  • Input validation review
  • Authentication/Authorization assessment
  • Dependency security checks
  • Remediation guidance and reporting
  • Use Case: Applies to new code changes, deployments, and dependency updates to catch security gaps before release.

Quick Start

Initiate a full security review of your codebase and receive a prioritized findings report.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate a code security review for OWASP Top 10 vulnerabilities?

A codebase security audit identifies security weaknesses across the OWASP Top 10, secrets exposure, and dependency vulnerabilities. It outputs a prioritized security report with file-level findings, remediation guidance, and references to relevant CVE sources.

How do I check my project dependencies for known security vulnerabilities?

Checking dependencies for security vulnerabilities involves analyzing project libraries against known CVE sources. The review generates a prioritized findings report detailing vulnerable dependencies and providing actionable remediation guidance.

Can I scan my codebase for exposed secrets and authentication weaknesses?

Yes, scanning a codebase can detect exposed secrets alongside authentication and authorization weaknesses. The automated review assesses these security gaps across new code changes and deployment workflows, outputting file-level findings for remediation.

What is the best way to catch security gaps before a software release?

The best way to catch security gaps before release is applying an automated security review to new code changes and dependency updates. This provides a structured audit of insecure patterns, input validation gaps, and deployment vulnerabilities.

Does automated security auditing work for new code changes and deployment workflows?

Automated security auditing works effectively for new code changes, dependency updates, and deployment workflows across typical software projects. It identifies input validation gaps and authentication weaknesses, delivering a prioritized security report.