security-review

Review code changes against OWASP Top 10 and generate remediation guidance.

17|1|Updated Dec 7, 2025

Search Tags:#authorization #OWASP #authentication #vulnerability #remediation #code-review #security-review

Ready to run

npx skills add https://github.com/mhylle/claude-skills-collection --skill security-review-mhylle

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/mhylle/claude-skills-collection/tree/main/skills/security-review
Command: npx skills add https://github.com/mhylle/claude-skills-collection --skill security-review-mhylle

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This skill provides a comprehensive security audit framework to validate code against OWASP patterns and project-specific requirements, acting as a security quality gate in the development pipeline.

Core Features & Use Cases

Security checklists aligned with OWASP Top 10
Real-world vulnerability patterns and remediation guidance
Integration with implement-phase as a security gate
Use Case: During a code review, run automated checks on authentication, input handling, and secrets management to prevent insecure changes

Quick Start

Invoke security-review on a code change or PR to generate a remediation-focused report.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I automate an OWASP security review for new code changes?▼

Automate an OWASP security review by applying this skill to code changes to check authentication, input validation, and secrets management, producing an actionable remediation report.

How does automated code review detect SQL injection and XSS vulnerabilities?▼

Automated security review detects SQL injection and XSS by enforcing structured checks on input validation and data exposure patterns in modified code before merging, providing specific remediation guidance.

Can I enforce a security quality gate in my CI workflow for authentication and API endpoints?▼

Yes, you can enforce a security quality gate in CI workflows by running automated checks on API endpoints, authentication, authorization, and rate limiting to prevent insecure code changes from merging.

What specific vulnerability checks should a security code review cover?▼

A security code review should cover OWASP Top 10 patterns including SQL injection prevention, XSS, CSRF, secrets management, dependency hygiene, and file upload vulnerabilities to ensure secure implementation.

Does this security audit check for secrets management and dependency hygiene?▼

Yes, this security audit explicitly checks for secrets management and dependency hygiene alongside input validation and data exposure, ensuring comprehensive coverage of vulnerability patterns in your codebase.

When should I run an automated security audit during the development lifecycle?▼

Run an automated security audit during code reviews and CI workflows when new or modified code must pass a security gate before merging, catching vulnerabilities in authentication and API endpoints early.