skills.rest
mnthe
mntheCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

security-review

Identify security vulnerabilities in code and provide remediation guidance.

4|Updated Jan 8, 2026
Search Tags:#OWASP#security#authentication#vulnerabilities#input-validation#code-review#secrets-detection
One-click install
npx skills add https://github.com/mnthe/hardworker-marketplace --skill security-review-mnthe
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/mnthe/hardworker-marketplace/tree/main/plugins/ultrawork/skills/security-review
Command: npx skills add https://github.com/mnthe/hardworker-marketplace --skill security-review-mnthe

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps reviewers quickly identify security vulnerabilities in code, applying established guidelines to reduce risk and improve code quality.

Core Features & Use Cases

  • OWASP Top 10 coverage: detect common web security risks across authentication, input handling, and APIs.
  • Secrets detection: identify leaked credentials and sensitive data in codebases.
  • Guided remediation: provide actionable fixes and secure patterns for developers.
  • Use cases include reviewing web apps, APIs, and services before deployment.

Quick Start

Run a security review on a codebase using the ultrawork reviewer workflow, then attach evidence and remediation guidance.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check my code for OWASP Top 10 vulnerabilities during a code review?▼

Run a security review session to enforce OWASP Top 10 checks across authentication, input validation, and APIs, which identifies common web risks and provides actionable remediation guidance for detected vulnerabilities.

What is the best way to detect leaked secrets and credentials in my codebase before deployment?▼

The best way to detect leaked secrets is to run a security review on your codebase, which scans for sensitive data and credentials, identifies exposure points, and provides secure pattern guidance to harden your deployment practices.

How does input validation improve API security and prevent common web risks?▼

Input validation improves API security by enforcing strict data boundary checks that block malicious payloads, mitigating injection risks identified through OWASP Top 10 guidelines during your security review sessions.

Can I use automated security checks to find authentication vulnerabilities in web apps?▼

Yes, you can use a security review workflow to find authentication vulnerabilities in web apps, applying established OWASP guidelines to detect risks and generate guided remediation steps for developers.

What secure patterns should I follow for secrets handling and deployment practices?▼

For secure secrets handling and deployment, follow patterns that remove credentials from codebases and enforce strict access controls, using remediation guidance from security reviews to protect sensitive data across deployment environments.

Related Skills

Explore More Software Engineering Skills→
seifreedseifreed
26

Tooling Policy Review

Enforce pre-approved local tools for code formatting and testing.

Community
Basic
beekeeper-labbeekeeper-lab
1

Validate Config

Detect and remediate misconfigurations and secret exposures in software projects.

Community
Advanced
winsorllcwinsorllc

code-review

Execute linters, static analysis, and security scanners on code.

Community
Intermediate
AgentSecOpsAgentSecOps
183

dast-zap

Automate OWASP ZAP dynamic security scans for web applications and APIs.

Official
Advanced