skills.rest
lpjhelder
lpjhelderCOMMUNITY
Explore all skills by this author →
GitHub

security-review

Audit codebases for vulnerabilities, misconfigurations, and secrets.

Updated Apr 10, 2026
Search Tags:#security#owasp#dependencies#audit#secrets#vulnerabilities#code
One-click install
npx skills add https://github.com/lpjhelder/kronon-forge --skill security-review-lpjhelder
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/lpjhelder/kronon-forge/tree/main/skills/security-review
Command: npx skills add https://github.com/lpjhelder/kronon-forge --skill security-review-lpjhelder

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Performs a structured, end-to-end security review of codebases to identify vulnerabilities, misconfigurations, and leakage of sensitive data.

Core Features & Use Cases

  • OWASP Top 10 coverage including authentication, insecure design, and misconfiguration checks.
  • Secrets detection and credential leakage scanning across repo content.
  • Input validation, data integrity, and dependency vulnerability assessment.
  • Structured security reporting with prioritized remediation guidance and evidence-backed findings.

Quick Start

Run a full security review of the project to generate a comprehensive security report.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform an OWASP Top 10 security audit on my codebase?▼

A security audit identifies vulnerabilities by checking your codebase against the OWASP Top 10, scanning dependencies, and reviewing authentication flows to generate a comprehensive vulnerability report with remediation guidance.

What is the best way to scan code for leaked secrets and credentials?▼

Secrets detection scans your repository content for leaked credentials and sensitive data. This security audit identifies potential leakage and provides evidence-backed findings to help you remediate exposed configurations quickly.

How do I check my project dependencies for known vulnerabilities before deployment?▼

Dependency vulnerability assessment scans your project libraries to identify known security flaws. This audit evaluates dependencies and deployment configurations to ensure your codebase is secure before release.

Does this security review cover authentication and authorization misconfigurations?▼

Yes, the security review includes authentication and authorization checks. It evaluates input validation, data integrity, and insecure design patterns to detect misconfigurations across your development and pre-deployment environments.

How do I get prioritized remediation guidance for code vulnerabilities?▼

The security audit generates a structured security report containing prioritized remediation guidance. It provides evidence-backed findings for detected vulnerabilities, misconfigurations, and leaked secrets to accelerate fixes.

Related Skills

Explore More Software Engineering Skills→
UnicornUnicorn

vulnerability-scan-agent

Scan code, dependencies, and configurations for known security vulnerabilities.

Official
Advanced
abranjithabranjith

review-security

Identify security vulnerabilities in code and deployment configuration.

Community
Advanced
BrunoSantanaDeveloperBrunoSantanaDeveloper

vulnerability-scanner

Scan codebases for dependencies, secrets, and insecure patterns.

Community
Advanced
skyasu2skyasu2
2

security-audit-workflow

Automate pre-deployment security audits for Next.js/Supabase CI pipelines.

Community
Advanced