security-review

Audit Laravel and React code for OWASP Top 10 vulnerabilities.

Updated Dec 22, 2025
One-click install
npx skills add https://github.com/htooayelwinict/claude-config --skill security-review-htooayelwinict
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/htooayelwinict/claude-config/tree/main/skills/security-review
Command: npx skills add https://github.com/htooayelwinict/claude-config --skill security-review-htooayelwinict

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill provides a structured security review using OWASP guidelines to identify and report vulnerabilities.

Core Features & Use Cases

  • OWASP Top 10 focused assessment for Laravel and React code.
  • Verification of authentication, authorization, and input validation.
  • Clear, severity-based reporting format.

Quick Start

Perform a security check on a PR and produce a prioritized list of critical fixes.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit PHP Laravel code for OWASP vulnerabilities?

OWASP audits for Laravel code identify security gaps in authentication, authorization, input validation, and common vulnerabilities like XSS and SQL injection. This Skill runs dependency checks via composer audit, verifies route middleware, reviews input handling, and produces severity-rated reports aligned with OWASP Top 10 standards.

Can I check React projects for CSRF and XSS vulnerabilities?

Yes. The Skill audits React projects for CSRF, XSS, and access-control issues using OWASP guidelines. It performs npm audit for dependencies, validates input handling patterns, and reports findings with severity ratings to prioritize fixes before deployment.

What does a security code audit include?

A structured security review examines authentication and authorization logic, input validation practices, dependency vulnerabilities, route middleware configuration, and OWASP Top 10 risk categories. The Skill produces a prioritized report with severity levels and actionable remediation guidance.

How do I prepare code for a pre-deployment security check?

Ensure your Laravel or React project has a dependency manifest (composer.lock or package-lock.json) in place. The Skill then runs mandatory dependency audits, reviews middleware, validates input handling, and checks access controls to catch vulnerabilities before release.

Does this work for authorization and access-control reviews?

Yes. The Skill verifies authorization logic, middleware enforcement, and access-control patterns specific to Laravel and React stacks. It identifies gaps in authentication flows and permission checks, reporting findings with OWASP context and severity.