skills.rest
manolakis
manolakisCOMMUNITY
Explore all skills by this author →
GitHub

security-review

Identify security weaknesses in code and dependencies using OWASP Top Ten.

1|Updated Feb 7, 2026
Search Tags:#code review#security#vulnerability#owasp#dependencies#audit
One-click install
npx skills add https://github.com/manolakis/agents-and-skills --skill security-review-manolakis
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/manolakis/agents-and-skills/tree/main/.github/skills/security-review
Command: npx skills add https://github.com/manolakis/agents-and-skills --skill security-review-manolakis

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill identifies and helps remediate security weaknesses in code and dependencies, ensuring your applications are robust against common threats.

Core Features & Use Cases

  • Code Security Analysis: Detects common code vulnerabilities like injection, broken access control, and secrets.
  • Dependency Risk Assessment: Scans project dependencies for known vulnerabilities and outdated components.
  • OWASP Top Ten Mapping: Categorizes findings against the latest OWASP Top Ten for clear understanding and prioritization.
  • Use Case: Before merging a pull request, run this Skill to automatically scan for hard-coded credentials or vulnerable libraries, preventing security breaches.

Quick Start

Use the security-review skill to check the current branch for any security issues.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan code for security vulnerabilities before a pull request?▼

To scan code for security vulnerabilities, you can use this Skill to automatically detect injection flaws, broken access control, and hardcoded secrets, providing remediation advice mapped to the OWASP Top Ten.

How does dependency risk assessment work for known vulnerabilities?▼

Dependency risk assessment works by scanning project dependencies to identify known vulnerabilities and outdated components, mapping these findings to OWASP categories to help prioritize security updates.

Can I automatically detect hardcoded secrets in my codebase?▼

Yes, you can automatically detect hardcoded secrets in your codebase by running this Skill on your current branch to identify exposed credentials and prevent security breaches before merging.

What is the best way to map injection vulnerabilities to OWASP categories?▼

The best way to map injection vulnerabilities to OWASP categories is to run a security analysis that categorizes findings against the latest OWASP Top Ten, ensuring clear understanding and prioritized remediation.

Does this security review check for broken access control and authorization flaws?▼

Yes, this security review checks for broken access control and authorization flaws, identifying these weaknesses alongside injection risks and secrets to secure your application against common threats.

Related Skills

Explore More Software Engineering Skills→
dhruvinrsonidhruvinrsoni

security-review

Review code diffs for OWASP Top 10 vulnerabilities and hardcoded secrets.

Community
Advanced
remiboivin021remiboivin021

release

Evaluate feature branches against acceptance criteria and output a MERGE READY or NOT READY verdict.

Community
Advanced
KrismithReddy12KrismithReddy12

health

Calculate a weighted 0-10 code quality score from linters and test runners.

Community
Advanced
mlvpatelmlvpatel
1

code-reaper

Identify and remediate security weaknesses in source code via static analysis.

Community
Advanced