skills.rest
mattjefferson
mattjeffersonCOMMUNITY
Explore all skills by this author →
Website𝕏@mjeffersonGitHub

security-review

Identify exploitable security vulnerabilities in code with evidence-based findings.

Updated Aug 23, 2026
Search Tags:#security#authentication#vulnerability#xss#owasp#injection#code-review
One-click install
npx skills add https://github.com/mattjefferson/agents --skill security-review-mattjefferson
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/mattjefferson/agents/tree/main/skills/security-review
Command: npx skills add https://github.com/mattjefferson/agents --skill security-review-mattjefferson

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Identify exploitable security vulnerabilities in code.

Core Features & Use Cases

  • Structured assessment of code for vulnerabilities using an evidence-based approach.
  • Confidence-based reporting that prioritizes HIGH-confidence findings and minimizes false positives.
  • On-demand guidance for security reviews during code reviews, audits, or investigations.

Quick Start

Provide the code snippet or project files you want reviewed, and I will perform a high-confidence security assessment and produce structured findings.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a systematic security code review on a pull request?▼

To perform a security code review, apply an evidence-based assessment to your codebase or pull request to identify exploitable vulnerabilities across languages, classify risks, and output structured findings with remediation guidance.

What is the best way to identify XSS and injection vulnerabilities in my codebase?▼

The best way to identify XSS and injection vulnerabilities is to analyze input handling, authentication, authorization, and data flow across your codebase to detect exploitable flaws and produce HIGH-confidence security findings.

Can I use an automated security review for multiple programming languages?▼

Yes, you can conduct a security review across multiple programming languages by analyzing input handling, authentication, authorization, and data flow to identify exploitable vulnerabilities regardless of the specific language used.

How does confidence-based reporting minimize false positives during vulnerability detection?▼

Confidence-based reporting minimizes false positives during vulnerability detection by prioritizing HIGH-confidence findings backed by evidence gathering and risk classification, ensuring that only actionable security threats are reported.

When do I need to apply OWASP risk classification to my code review process?▼

You need to apply OWASP risk classification to your code review process when evaluating input handling, authentication, authorization, and data flow to accurately categorize exploitable vulnerabilities and guide security reporting.

Related Skills

Explore More Software Engineering Skills→
zerAdazerAda

bmad-adversarial-review

Automate adversarial code review and vulnerability assessment workflows.

Community
Intermediate
krishnakanthb13krishnakanthb13
41

security_audit

Audit codebases for OWASP Top 10 vulnerabilities and generate SECURITY.md reports.

Community
Advanced
dzineerdzineer

update-2-git-with-diff

Generate a Git diff, create a pull request, and merge into the main branch.

Community
Intermediate
mlvpatelmlvpatel
1

code-reaper

Identify and remediate security weaknesses in source code via static analysis.

Community
Advanced