security-review

Identify exploitable security vulnerabilities in code during code reviews.

35|5|Updated Jan 1, 2026
One-click install
npx skills add https://github.com/gricha/perry --skill security-review-gricha
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/gricha/perry/tree/main/.agents/skills/security-review
Command: npx skills add https://github.com/gricha/perry --skill security-review-gricha

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Security code review tooling to identify exploitable vulnerabilities in code, prioritizing high-confidence findings and providing clear guidance for remediation.

Core Features & Use Cases

  • Systematic vulnerability identification across common risk areas (input handling, authentication, authorization, data protection, configuration).
  • Confidence-based reporting with explicit high-confidence findings suitable for remediation prioritization.
  • Real-world use: during a code review, surface critical vulnerabilities and suggested fixes.

Quick Start

Review the provided code snippet and generate a high-confidence security report with actionable findings.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit code for exploitable security vulnerabilities during a code review?

To audit code for security vulnerabilities, trace data flow across input handling, authentication, authorization, data protection, and configuration risks to surface high-confidence findings confirmed against established security guidance.

What is the best way to check my codebase for OWASP vulnerabilities like broken authorization?

Checking for OWASP vulnerabilities involves systematically assessing input handling, authentication, authorization, data protection, and configuration risks to identify exploitable flaws and generate a high-confidence security report.

Can I use an automated security review to trace data flow and assess upstream validation?

Yes, a systematic security review researches the codebase to trace data flow, assess upstream validation, and confirm findings against established security guidance, prioritizing high-confidence vulnerabilities for remediation.

Does this vulnerability identification approach work for assessing data protection and configuration risks?

Yes, vulnerability identification systematically assesses data protection and configuration risks alongside input handling, authentication, and authorization to surface exploitable security flaws and provide clear remediation guidance.

How do I generate a high-confidence security report with actionable findings for my code?

Generate a high-confidence security report by reviewing the provided code snippet, tracing data flow, assessing upstream validation, and confirming exploitable vulnerabilities against established security guidance to prioritize remediation.