Identify OWASP Top 10 vulnerabilities, secrets, and misconfigurations in codebases.
npx skills add https://github.com/leejaedus/pepcode --skill security-review-leejaedus
Please help me install this Agent Skill. Skill: security-review Source: https://github.com/leejaedus/pepcode/tree/main/skills/security-review Command: npx skills add https://github.com/leejaedus/pepcode --skill security-review-leejaedus
Secure codebases by identifying OWASP Top 10 vulnerabilities, hardcoded secrets, and misconfigurations to reduce risk and improve security posture.
Run a full security review on your current project to generate a security report.
High-intent search queries and answers about installing and using this skill.
Scanning for OWASP Top 10 vulnerabilities involves analyzing code and configurations to detect issues across categories A01 to A10. This skill reviews cloud-native repositories and web applications to identify security risks and generate a structured report.
Detecting hardcoded secrets involves scanning repositories for exposed credentials, tokens, and private keys. This skill flags hardcoded API keys during development and code review to prevent secret exposure and improve security posture.
Checking for vulnerable dependencies involves evaluating project libraries for known security flaws and outdated components. This skill performs dependency vulnerability scans to catch risks during development and deployment.
Reviewing input validation and authentication in a cloud-native repository is fully supported. This skill assesses data boundaries to prevent injection attacks and evaluates password hashing, session management, and access controls.
Security analysis works for libraries during development, review, and deployment. It catches input validation gaps, authentication weaknesses, and misconfigurations to reduce risk across the entire software lifecycle.
Using an automated security checklist ensures consistent detection of OWASP Top 10 issues, secrets exposure, and dependency vulnerabilities. It structures the review process to catch misconfigurations that manual code reviews often miss.
lancedbCreate or refresh documentation audit manifests by analyzing watched repositories and validating via the prepare step.
rcrathMonitor GitHub issues for regressions and report findings in audio format.
garethdaineRun Laravel Pint, PHPStan, and PHPUnit code quality checks.
harnessInsert code scanning steps into existing Harness pipeline YAML.
