security-review

Run a security audit across your Laravel and React stack using OWASP Top 10 guidelines. The Skill executes dependency checks (composer audit, npm audit), validates routes and middleware, and produces vulnerability reports with severity levels, affected components, and remediation steps for risks like XSS, SQL injection, CSRF, and authorization flaws.

OWASP Top 10 is a prioritized list of the most critical web application security risks. This audit checks your code against those standards to identify common vulnerabilities such as broken authentication, sensitive data exposure, injection attacks, and insecure deserialization in your Laravel backend and React frontend.

Yes. The audit handles cross-stack security practices for both Laravel and React applications, running dependency checks and middleware validation across your PHP and JavaScript code to identify vulnerabilities specific to each framework and shared attack vectors.

The audit generates a vulnerability report listing identified issues with severity levels, the components affected, and specific remediation recommendations. This supports both pre-deployment checks and ongoing authorization and authentication reviews.

Yes. The audit requires composer (for PHP dependency checks) and npm (for JavaScript dependencies), plus access to Laravel's artisan CLI for route and middleware inspection. These must be configured in your project environment before running the review.