skills.rest
LawrenceHwang
LawrenceHwangCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

security-review

Identify security vulnerabilities in codebases and generate patch recommendations.

Updated Mar 31, 2026
Search Tags:#security#vulnerability#secrets#code-review#report#dependency-audit
One-click install
npx skills add https://github.com/LawrenceHwang/flappy_bird --skill security-review-lawrencehwang
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/LawrenceHwang/flappy_bird/tree/main/.github/skills/security-review
Command: npx skills add https://github.com/LawrenceHwang/flappy_bird --skill security-review-lawrencehwang

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

AI-powered security review identifies security vulnerabilities, insecure configurations, and secrets exposure in a codebase, enabling teams to fix issues before deployment.

Core Features & Use Cases

  • Scope-driven security scanning: performs codebase-wide and path-limited reviews to reveal injection flaws, authentication/authorization issues, and insecure dependencies.
  • Dependency and secrets audits: flags vulnerable packages and hardcoded credentials across languages and configurations.
  • Cross-file data-flow analysis: traces user input from entry points to dangerous sinks to detect complex vulnerability chains.
  • Structured reporting with patches: outputs a prioritized security report and concrete patch recommendations for critical/high findings.

Quick Start

Run a security review on the current repository and review the generated report to remediate issues.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan a codebase for security vulnerabilities and hardcoded secrets?▼

To scan a codebase for security vulnerabilities and hardcoded secrets, run an AI-powered security review on the repository to identify injection flaws, insecure configurations, and exposed credentials before deployment.

Can I run a security review on specific paths instead of a full project scan?▼

Security reviews can be performed on both codebase-wide scopes and path-limited targets. This scope-driven scanning allows you to analyze specific directories or files during code reviews or CI workflows.

Does codebase security scanning support Python, Go, and JavaScript projects?▼

Codebase security scanning supports JavaScript, TypeScript, Python, Java, Ruby, Go, PHP, and Rust projects to identify vulnerabilities, audit dependencies, and detect exposed secrets across multiple languages.

How does cross-file data-flow analysis detect injection flaws?▼

Cross-file data-flow analysis traces user input from entry points to dangerous sinks, detecting complex vulnerability chains and injection flaws by mapping how untrusted data flows through source files.

What is included in a structured security report for vulnerable dependencies?▼

A structured security report includes prioritized findings for vulnerable packages and insecure configurations, providing concrete patch recommendations for critical and high severity issues to enable remediation.

When should I use AI security review instead of manual code analysis?▼

AI security review should be used during code reviews or CI workflows to automate the detection of injection flaws, insecure dependencies, and secrets exposure, providing structured reports and patch recommendations faster than manual analysis.

Related Skills

Explore More Software Engineering Skills→
BasharAmsoBasharAmso
1

Security Audit

Audit code and dependencies for security vulnerabilities and generate a severity-rated report.

Community
Advanced
simotasimota
68

Sentinel

Detect and remediate codebase vulnerabilities including hardcoded secrets and SQL injection.

Community
Advanced
PriyanshKuniyalPriyanshKuniyal

sast-configuration

Configures and manages SAST tools for automated vulnerability detection in CI/CD pipelines.

Community
Advanced
matteocervellimatteocervelli
25

security-scanner

Scan codebases for secrets, vulnerable dependencies, and insecure patterns.

Community
Advanced