skills.rest
hypeJunction
hypeJunctionCOMMUNITY
Explore all skills by this author →
GitHub

security-review

Audit codebases against OWASP categories and report vulnerabilities with confidence levels.

1|Updated Dec 1, 2025
Search Tags:#code review#OWASP#security#vulnerability#audit#threat modeling
One-click install
npx skills add https://github.com/hypeJunction/ai-assistant-starter --skill security-review-hypejunction
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/hypeJunction/ai-assistant-starter/tree/main/skills/security-review
Command: npx skills add https://github.com/hypeJunction/ai-assistant-starter --skill security-review-hypejunction

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill addresses the critical need for thorough security audits by systematically identifying vulnerabilities and attack vectors within codebases, ensuring a more secure software development lifecycle.

Core Features & Use Cases

  • Systematic Auditing: Performs in-depth security reviews based on OWASP categories and modern threat landscapes.
  • Attack Surface Mapping: Identifies potential entry points for attackers, including user inputs, database queries, and external service calls.
  • Confidence-Based Reporting: Prioritizes findings based on the likelihood and impact of exploitation, distinguishing between confirmed vulnerabilities and potential risks.
  • Use Case: Before merging a critical feature, run /security-review --diff to ensure no new vulnerabilities were introduced, providing a confidence-based report on the changes.

Quick Start

Run /security-review to perform a security audit of the entire project.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a security audit on my codebase to find vulnerabilities?▼

You can conduct a security audit by running a systematic review that maps attack surfaces and checks code against OWASP categories to report vulnerabilities with assigned confidence levels.

What is attack surface mapping in the context of a code security review?▼

Attack surface mapping is the process of identifying potential entry points for attackers, such as user inputs, database queries, and external service calls, during a code security review.

Can I target a security review to only check recent code changes?▼

Yes, you can target a security review to recent changes by using scope flags, allowing you to audit specific diffs and ensure no new vulnerabilities were introduced before merging.

Does confidence-based reporting help prioritize vulnerability remediation?▼

Confidence-based reporting prioritizes findings by distinguishing between confirmed vulnerabilities and potential risks based on their likelihood and impact of exploitation.

When should I perform an OWASP threat modeling audit on my project?▼

You should perform an OWASP threat modeling audit before merging critical features to systematically identify attack vectors and ensure a secure software development lifecycle.

Related Skills

Explore More Software Engineering Skills→
balic-AI-ML-R-D-Resourcesbalic-AI-ML-R-D-Resources

security-audit-context-building

Map architecture, trust boundaries, and data flows for security audit scoping.

Official
Advanced
dariushouledariushoule
196

vuln-hunter

Identify security weaknesses in a paused debuggee via import/export reconnaissance and PoC testing.

Community
Advanced
Monjyu1101Monjyu1101
1

requesting-code-review

Automate pre-commit code verification with security scans, quality gates, and auto-fixes.

Community
Advanced
esopianesopian
2

gstack/cso

Automates security audits across infrastructure, dependencies, and application configurations to detect vulnerabilities.

Community
Advanced