security-review

Security code reviews systematically scan code for vulnerabilities across authentication, authorization, input validation, and cryptography. This Skill applies OWASP Top 10 checks and secure coding practices to detect and remediate flaws in backend services before they reach production.

The OWASP Top 10 ranks the most critical web application security risks, including injection attacks, broken access control, and cryptographic failures. Reviewing code against these categories ensures you address the highest-impact vulnerability classes systematically.

Yes. This Skill conducts comprehensive security reviews focused on authentication mechanisms, session management, password hashing, and access control logic. It identifies insecure patterns and proposes secure alternatives to prevent broken authentication and authorization vulnerabilities.

Dependency scanning tools like pip-audit identify vulnerable third-party components in your codebase. This Skill integrates dependency analysis into the security review workflow to catch known vulnerabilities before they become exploitable in production.

Security code reviews prioritize findings by risk level, mapping each vulnerability to its potential impact and OWASP category. This generates actionable remediation guidance so you address the most critical issues first across development and staging environments.

Yes. This Skill applies to backend services and codebases across development, staging, and audit workflows. It provides static analysis and secure configuration verification suitable for pre-deployment reviews and post-deployment security audits.