security-review

Identify security vulnerabilities in multi-language codebases and generate a security-review report.

1|Updated Feb 23, 2026
One-click install
npx skills add https://github.com/oto1720/claude-agents-skills --skill security-review-oto1720
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/oto1720/claude-agents-skills/tree/main/skills/security-review
Command: npx skills add https://github.com/oto1720/claude-agents-skills --skill security-review-oto1720

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Detect and report security vulnerabilities and risks in codebases, enabling teams to remediate before release.

Core Features & Use Cases

  • Secret detection and management reviews to prevent leakage of API keys and credentials.
  • Authentication and authorization checks to ensure proper access controls.
  • Input validation and secure coding practice checks to reduce injection risks.
  • Automated security-report generation with remediation guidance for developers and security teams.

Quick Start

Run a security scan on your project path to generate a comprehensive security-review report.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my codebase for security vulnerabilities and secrets?

To scan a codebase for security vulnerabilities, run a targeted review on your project path to detect secrets, authentication weaknesses, and injection flaws, generating a comprehensive security-review report with remediation guidance.

Can I check for API key leakage and hardcoded credentials in a multi-language repository?

Yes, you can check for API key leakage and hardcoded credentials in a multi-language repository through secret detection and management reviews, identifying exposed credentials to prevent leakage before release.

How do I review authentication and authorization controls for proper access?

Review authentication and authorization controls by performing targeted code checks that verify proper access controls, identifying authentication weaknesses across the project to ensure secure user session handling.

What is the best way to automate security report generation with remediation steps?

The best way to automate security report generation is running an end-to-end security scan that detects vulnerabilities, validates input handling, and outputs a formal report with actionable remediation guidance for developers.

Does this security review tool work for detecting injection flaws and input validation issues?

Yes, this security review tool works for detecting injection flaws by performing input validation and secure coding practice checks, reducing injection risks across the multi-language project codebase.

What types of security flaws are identified during a code review?

Security flaws identified during a code review include exposed secrets, authentication weaknesses, injection flaws, and improper input validation, with results compiled into a formal security-review report for remediation.