security-review

Name: security-review
Availability: InStock
Author: gtpgg1013

Audit codebases for OWASP Top 10 vulnerabilities, hardcoded secrets, and unsafe patterns.

Updated Mar 21, 2026

Search Tags:#security #vulnerability #owasp #audit #secrets #code-review #dependency

Ready to run

npx skills add https://github.com/gtpgg1013/claude-skills-collection --skill security-review-gtpgg1013

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/gtpgg1013/claude-skills-collection/tree/main/skills/agents/security-review
Command: npx skills add https://github.com/gtpgg1013/claude-skills-collection --skill security-review-gtpgg1013

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Conducts a thorough security review of codebases to identify OWASP Top 10 vulnerabilities, hardcoded secrets, and unsafe patterns.

Core Features & Use Cases

OWASP Top 10 vulnerability detection across code, configurations, and dependencies.
Secrets detection and exposure remediation guidance.
Structured security reports with severity scoring and prioritized fixes.

Quick Start

Run a full security review on the current project to generate a detailed report and recommended fixes.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I run a security audit on my codebase to detect OWASP Top 10 vulnerabilities?▼

Run a comprehensive security audit to identify OWASP Top 10 vulnerabilities across your code, configurations, and dependencies. The review generates structured reports detailing severity scores, file:line locations, and remediation guidance.

Can this security review find hardcoded secrets and unsafe patterns in my project?▼

Yes, this security review detects hardcoded secrets and unsafe patterns within your codebase. It provides exposure remediation guidance to help you secure sensitive data and eliminate risky development practices.

What is included in the security posture assessment for development and production pipelines?▼

The security posture assessment evaluates code review, dependency checks, input validation, authentication, and secure deployment practices. This covers both development and production pipelines to ensure continuous protection.

How do I check my project dependencies for known vulnerabilities and CVE references?▼

Perform a dependency check to scan your project libraries for known vulnerabilities. The resulting security report includes specific CVE references and prioritized fixes to address the identified risks.

Does the vulnerability reporting provide exact file locations and remediation steps?▼

Yes, vulnerability reporting provides precise file:line locations alongside severity scoring. It includes actionable remediation guidance and an overall security posture assessment to prioritize your fixes effectively.

What's the best way to remediate hardcoded secrets found during a code review?▼

The best way to remediate hardcoded secrets is to follow the structured exposure remediation guidance provided by the security audit. This ensures you systematically remove sensitive data and implement secure secret management practices.