Audit codebases for OWASP Top 10 security vulnerabilities.
npx skills add https://github.com/NAKKA-K/dotfiles --skill security-review-nakka-k
Please help me install this Agent Skill. Skill: security-review Source: https://github.com/NAKKA-K/dotfiles/tree/main/claude/skills/security-review Command: npx skills add https://github.com/NAKKA-K/dotfiles --skill security-review-nakka-k
This skill helps teams identify and review security vulnerabilities in code using OWASP Top 10 as a framework, ensuring potential issues are found early in the development lifecycle.
Run the security review workflow on your project by applying the provided steps to enumerate scope, detect secrets, identify injection flaws, and verify authentication-related protections.
High-intent search queries and answers about installing and using this skill.
Security vulnerability detection for authentication implementations involves checking for improper access controls, verifying authentication handling, and scanning for misconfigurations in user login and authorization flows to ensure they align with OWASP Top 10 security controls.
The best way to detect hard-coded secrets and injection flaws during a code review is to apply step-by-step detection patterns that scan source code for sensitive data exposure and validate user input handling across API endpoints and data transmission flows.
Yes, this security review process works across various programming languages and applies systematic vulnerability checks to third-party API integrations, file uploads, payments, and data storage to identify misconfigurations and improper access controls.
To review file upload and API endpoint security controls step by step, validate user input handling, check for injection flaws, verify proper authentication mechanisms, and scan for misconfigurations in data transmission and storage to generate a prioritized remediation list.
You need a systematic security review for secrets management and data handling when preparing a codebase with multiple services for deployment, ensuring potential vulnerabilities like hard-coded secrets and data exposure are found early in the development lifecycle.
twlinesGenerates structured Markdown documentation for Effect-TS code files and services.
chavangorakh1999Review JavaScript/Node.js code for OWASP Top 10 vulnerabilities and dependency security.
proffesor-for-testingTest software security vulnerabilities using OWASP principles.
4lermanAnalyze software dependencies for vulnerabilities, license compliance, and outdated packages.
