security-review

Trace imports, callers, and data flow to report the most significant security issue.

27|2|Updated Mar 27, 2026
One-click install
npx skills add https://github.com/maragudk/fabrik --skill security-review-maragudk
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/maragudk/fabrik/tree/main/skills/security-review
Command: npx skills add https://github.com/maragudk/fabrik --skill security-review-maragudk

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

Perform a focused security review of a codebase by starting from a random file and tracing a single potential vulnerability path to surface a critical issue.

Core Features & Use Cases

  • Random-file guided starting point to encourage exploration of diverse code paths.
  • Single-path security tracing: follow imports, callers, and data flow to identify vulnerabilities.
  • Outcome-driven reporting: produce a single most significant finding with context and remediation steps.

Quick Start

Run the bundled script to pick a random starting point and begin the review.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I find the most critical security vulnerability in a large codebase?

A random-file guided security review identifies the single most significant vulnerability by starting from a random file and tracing imports, callers, and data flow to uncover critical risks with remediation steps.

What is a random-file guided security audit and how does it work?

A random-file guided security audit selects a random starting file, follows a single trace of imports, callers, and data flow, and reports the most significant security issue found along that path.

How do I perform a focused codebase security review without scanning every file?

Run a bundled script to pick a random starting file, then trace a single vulnerability path through imports and data flow to surface one critical security issue without scanning the entire codebase.

Can I use a random-file security review on codebases of any size?

Yes, this random-file security review applies to codebases of any size, using a bundled script to deterministically select a random starting file and trace a single vulnerability path.

What is the best way to quickly surface a critical security issue during development?

Use a single-path security trace from a random file to quickly surface a critical security issue, producing a concise finding with the starting point, execution path, and remediation steps.

What limitations does a single-path security trace have for vulnerability detection?

A single-path security trace limits detection to one finding per run, focusing on depth along a single trace rather than comprehensive coverage of all security risks across the entire codebase.