skills.rest
nimadorostkar
nimadorostkarCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

security-review

Trace untrusted data and verify authorization logic to identify security vulnerabilities.

25|3|Updated Jul 14, 2026
Search Tags:#code review#authorization#security#vulnerability#owasp#audit
One-click install
npx skills add https://github.com/nimadorostkar/Claude-Skills-collection --skill security-review-nimadorostkar
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/nimadorostkar/Claude-Skills-collection/tree/main/skills/security/security-review
Command: npx skills add https://github.com/nimadorostkar/Claude-Skills-collection --skill security-review-nimadorostkar

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill addresses the gap between theoretical security scanning and actionable remediation by providing a structured, context-aware framework for identifying and fixing real-world vulnerabilities.

Core Features & Use Cases

  • OWASP Top 10 Analysis: Evaluates code against industry-standard vulnerability patterns.
  • Authorization Auditing: Specifically targets object-level access control flaws which automated scanners often miss.
  • Use Case: Use this during a pull request review to identify broken object-level authorization or exposed secrets before code is merged into production.

Quick Start

Perform a security review on the provided codebase focusing on authentication and authorization logic.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit code for security vulnerabilities and authorization flaws?▼

Security code review during pull requests identifies object-level authorization flaws and exposed secrets before merging into production. It evaluates code against OWASP Top 10 patterns by tracing untrusted data flows and verifying access control logic.

How do I find broken object-level authorization during a pull request review?▼

Find broken object-level authorization by tracing untrusted data flows and verifying access control logic manually. This targets object-level access control flaws automated scanners miss, producing severity-ranked findings with concrete exploit paths for remediation.

Can I use this for pre-deployment security assessments and penetration test remediation?▼

Yes, this applies to pre-deployment security assessments and penetration test remediation. It requires manual analysis of control flow, secret exposure, and dependency risk to produce severity-ranked findings with concrete exploit paths.

What is the best way to evaluate source code against OWASP Top 10 vulnerability patterns?▼

The best way to evaluate source code against OWASP Top 10 patterns is through structured manual analysis of control flow and secret exposure. This context-aware framework traces untrusted data to bridge theoretical scanning and actionable remediation.

Does automated security scanning work for object-level access control flaws?▼

Automated security scanning often misses object-level access control flaws. Identifying them requires manually tracing untrusted data and verifying authorization logic to produce severity-ranked findings with concrete exploit paths for remediation.

Related Skills

Explore More Software Engineering Skills→
Andreicr1Andreicr1

security-reviewer

Trace untrusted input in web service code diffs to identify exploitable vulnerabilities.

Community
Intermediate
traylinxtraylinx
2

security-expert

Identifies and remediates vulnerabilities in software projects across web, mobile, and backend services.

Official
Advanced
alirezarezvanialirezarezvani
763

security-auditor

Detect OWASP Top 10 security vulnerabilities in code and configurations.

Community
Intermediate
amano--amano--

burp-suite

Intercept HTTP traffic and test web applications for security vulnerabilities.

Community
Advanced