Detect secrets, injection, auth, and dependency risks in code changes.
npx skills add https://github.com/igot-ai/os-twin --skill security-review-igot-ai
Please help me install this Agent Skill. Skill: security-review Source: https://github.com/igot-ai/os-twin/tree/main/.agents/skills/roles/qa/security-review Command: npx skills add https://github.com/igot-ai/os-twin --skill security-review-igot-ai
This skill enables QA teams to perform focused security reviews of code changes, helping identify secrets, injection vectors, auth issues, and dependency vulnerabilities early in the software lifecycle.
Review the latest code changes for potential secrets and insecure patterns and record findings in qa-report.md.
High-intent search queries and answers about installing and using this skill.
To check code changes for hardcoded secrets and credential leaks, review pull requests and feature branches to detect hardcoded keys and tokens, preventing unauthorized access and data breaches early in the software lifecycle.
To identify injection and authentication vulnerabilities during a QA code review, analyze code changes for insecure input handling patterns to prevent SQLi, XSS, and command injections, ensuring proper auth checks are enforced.
To document security findings and remediation steps in a QA report, generate a dedicated security section within qa-report.md that records detected vulnerabilities, insecure configurations, and guided fixes from the code review.
A focused security review for pull requests is a targeted QA process that examines repository changes to detect secrets, injection vectors, auth issues, and dependency risks, preventing leaks and breaches before merging code.
baskarajatiIdentify and document bugs, security vulnerabilities, and code quality issues in local branch changes.
DenissvgnAutomate authorized feature branch merges into main with validation and rollback.
cxnaiveAutomate pre-commit code verification with static security analysis and regression checks.
phatblatAutomate web application security assessments with reconnaissance, threat modeling, and vulnerability analysis.
