skills.rest
mhylle
mhylleCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

security-review

Review code changes against OWASP Top 10 and generate remediation guidance.

17|1|Updated Dec 7, 2025
Search Tags:#authorization#OWASP#authentication#vulnerability#remediation#code-review#security-review
One-click install
npx skills add https://github.com/mhylle/claude-skills-collection --skill security-review-mhylle
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/mhylle/claude-skills-collection/tree/main/skills/security-review
Command: npx skills add https://github.com/mhylle/claude-skills-collection --skill security-review-mhylle

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This skill provides a comprehensive security audit framework to validate code against OWASP patterns and project-specific requirements, acting as a security quality gate in the development pipeline.

Core Features & Use Cases

  • Security checklists aligned with OWASP Top 10
  • Real-world vulnerability patterns and remediation guidance
  • Integration with implement-phase as a security gate
  • Use Case: During a code review, run automated checks on authentication, input handling, and secrets management to prevent insecure changes

Quick Start

Invoke security-review on a code change or PR to generate a remediation-focused report.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate an OWASP security review for new code changes?▼

Automate an OWASP security review by applying this skill to code changes to check authentication, input validation, and secrets management, producing an actionable remediation report.

How does automated code review detect SQL injection and XSS vulnerabilities?▼

Automated security review detects SQL injection and XSS by enforcing structured checks on input validation and data exposure patterns in modified code before merging, providing specific remediation guidance.

Can I enforce a security quality gate in my CI workflow for authentication and API endpoints?▼

Yes, you can enforce a security quality gate in CI workflows by running automated checks on API endpoints, authentication, authorization, and rate limiting to prevent insecure code changes from merging.

What specific vulnerability checks should a security code review cover?▼

A security code review should cover OWASP Top 10 patterns including SQL injection prevention, XSS, CSRF, secrets management, dependency hygiene, and file upload vulnerabilities to ensure secure implementation.

Does this security audit check for secrets management and dependency hygiene?▼

Yes, this security audit explicitly checks for secrets management and dependency hygiene alongside input validation and data exposure, ensuring comprehensive coverage of vulnerability patterns in your codebase.

When should I run an automated security audit during the development lifecycle?▼

Run an automated security audit during code reviews and CI workflows when new or modified code must pass a security gate before merging, catching vulnerabilities in authentication and API endpoints early.

Related Skills

Explore More Software Engineering Skills→
Security-Phoenix-demoSecurity-Phoenix-demo
63

0day-scanner

Scan commits, pull requests, or files for potential zero-day vulnerabilities.

Official
Advanced
KaakatiKaakati
2

security-auditor

Audit code for security vulnerabilities, exposed secrets, and compliance gaps.

Community
Advanced
CenredJunCenredJun

security-auditor

Scan JavaScript, TypeScript, and Python codebases for vulnerabilities and secrets.

Community
Advanced
cenjiecenjie

penetration-testing

Identify and validate security vulnerabilities through simulated attacks on applications and networks.

Community
Advanced