security-review-owasp-secure-code-review

What problem does it solve?

This Skill helps reviewers uncover security weaknesses in code and related controls that can lead to unauthorized access, injection, secret exposure, or business logic abuse.

Core Features & Use Cases

• Trust Boundary Review: Inspect how attacker-controlled input moves through validation, parsing, execution, and output handling.
• Identity and Access Review: Check authentication, session handling, authorization checks, and privilege-sensitive transitions.
• Secrets and Workflow Review: Evaluate secret handling, cryptographic choices, and business rules for bypasses, races, or unsafe state changes.
• Use Case: Review an authentication flow, API endpoint, webhook receiver, or privileged action path and produce evidence-based findings with concrete remediation.

Quick Start

Use the security-review-owasp-secure-code-review skill to review the selected code path for trust-boundary, authorization, secret-handling, and business logic issues.