Review web applications for OWASP Top 10 and security vulnerabilities.
npx skills add https://github.com/k3sdtw/.claude --skill security-review-k3sdtw
Please help me install this Agent Skill. Skill: security-review Source: https://github.com/k3sdtw/.claude/tree/main/skills/security-review Command: npx skills add https://github.com/k3sdtw/.claude --skill security-review-k3sdtw
This Skill helps security and development teams quickly identify and remediate common web application vulnerabilities, covering authentication, authorization, secret management, input validation, and OWASP Top 10 risks.
Run the security-review skill during feature development, API design reviews, and pre-deployment checks to generate a tailored security checklist for your web application. Example: Run the security-review against your new login API to identify required controls and remediation steps.
High-intent search queries and answers about installing and using this skill.
Security reviews systematically check authentication mechanisms, access control policies, and authorization logic to identify gaps. This skill applies a checklist covering login flows, session management, role-based access, and permission enforcement to catch common flaws before deployment.
Secret management reviews verify that API keys, credentials, and tokens are never hardcoded, logged, or exposed in responses. This skill audits configuration handling, environment variable usage, and data logging to prevent credential leaks and unauthorized access.
Input validation reviews enforce sanitization, parameterized queries, and output encoding to block SQL injection, XSS, and command injection. This skill checks request handling, database queries, and template rendering against OWASP Top 10 injection patterns.
Run security reviews when designing new API endpoints, adding authentication features, handling sensitive data, or before deployment. The skill generates a tailored checklist and remediation tasks specific to your feature to catch vulnerabilities early in the lifecycle.
Yes, the checklist-driven approach supports audits, threat modeling, and risk remediation workflows. It covers secure configuration, logging practices, and access control validation, providing guidance and remediation steps aligned with security standards and deployment reviews.
This skill audits authentication, authorization, secret management, input validation, secure configuration, and data exposure controls mapped to OWASP Top 10 risks. It enforces guardrails for injection prevention, access control, logging, and secure implementation patterns.
KimjimanReview code for authentication, input validation, and secrets management vulnerabilities.
ZateGenerate structured security audit reports with findings, severity, and ASVS mappings.
SergeiGolosDetect and prioritize security vulnerabilities across dependencies, secrets, code patterns, and configurations.
rfdiosuaoAudit application code for OWASP Top 10 vulnerabilities and CVE impacts.
