security-review

Analyze codebases for security vulnerabilities across multiple programming languages.

Updated Apr 22, 2026

Search Tags:#security #injection #vulnerabilities #risk-assessment #static-analysis #code-review

Ready to run

npx skills add https://github.com/iliasjennane/LearningAgent --skill security-review-iliasjennane

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/iliasjennane/LearningAgent/tree/main/.agents/skills/security-review
Command: npx skills add https://github.com/iliasjennane/LearningAgent --skill security-review-iliasjennane

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

AI-powered security scanner that reasons about your codebase like a human security researcher — tracing data flows and identifying vulnerabilities that pattern-matching tools miss.

Core Features & Use Cases

Traces data flow to reveal injection, authentication, and data leakage weaknesses across files
Audits dependencies for known CVEs and secrets exposure
Generates prioritized findings with concrete remediation recommendations

Quick Start

Run /security-review on a repository to initiate an automated security assessment.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I find security vulnerabilities in my codebase?▼

Run an automated security review on your repository to analyze data flows and identify vulnerabilities like injections, secret exposure, and insecure dependencies. The scanner generates prioritized findings with severity ratings and concrete patch suggestions.

Can I run a security review on a single file or does it need a full repository?▼

You can run a security review on both single files and full repositories. The scanner applies cross-file reasoning and data-flow analysis to trace vulnerabilities across your entire project scope.

Does static analysis work with Python, Java, and Go projects?▼

Static analysis for security review supports JavaScript, Python, Java, Go, Ruby, and Rust projects. It traces data flow across these languages to reveal injection, authentication, and data leakage weaknesses.

How does data-flow analysis find injection vulnerabilities that pattern matching misses?▼

Data-flow analysis traces how data moves across files to reveal injection, authentication, and data leakage weaknesses. This approach reasons about your codebase like a human security researcher, identifying vulnerabilities that simple pattern-matching tools miss.

What is the best way to remediate insecure dependencies and secret exposure?▼

The best way to remediate insecure dependencies and secret exposure is to run a security review that audits your project for known CVEs. It generates prioritized findings with concrete remediation recommendations and targeted patch suggestions.

Can I get severity ratings and patch suggestions for code vulnerabilities?▼

Yes, running a security review generates prioritized findings that include severity ratings and targeted remediation proposals. This allows you to address the most critical injection and data leakage vulnerabilities first.