skills.rest
ozby
ozbyCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

security-review

Identify and document security vulnerabilities and misconfigurations across APIs, services, and CI/CD pipelines.

1|Updated Mar 17, 2025
Search Tags:#security#vulnerability#owasp#audit#review#code
One-click install
npx skills add https://github.com/ozby/node-pubsub --skill security-review-ozby
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/ozby/node-pubsub/tree/main/.codex/skills/security-review
Command: npx skills add https://github.com/ozby/node-pubsub --skill security-review-ozby

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill enables teams to perform thorough security reviews of their codebases, identifying vulnerabilities, misconfigurations, and insecure patterns before deployment.

Core Features & Use Cases

  • OWASP Top 10 coverage and vulnerability mapping across languages and stacks.
  • Secrets detection and insecure configuration scanning to prevent credential leakage.
  • Structured remediation guidance with prioritized fixes and evidence-backed recommendations.

Quick Start

Run a security review on your repository to generate a prioritized remediation report.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform an OWASP Top 10 security audit on my codebase?▼

A codebase security audit identifies vulnerabilities, misconfigurations, and insecure patterns before deployment by applying OWASP Top 10 mapping, secrets detection, and input validation review across APIs and services.

What is the best way to detect hardcoded secrets and insecure configurations in code?▼

Detecting hardcoded secrets involves scanning your repository for credential leakage and insecure configurations, producing evidence-backed recommendations and prioritized fixes for remediation.

Can I review dependency security and input validation across different programming stacks?▼

Yes, dependency security and input validation review support multiple languages and stacks by applying a structured assessment process that maps uncovered risks directly to the OWASP Top 10.

How do I get remediation guidance for vulnerabilities found in my APIs and CI/CD pipelines?▼

Remediation guidance for vulnerabilities in APIs and CI/CD pipelines provides structured, evidence-backed recommendations with prioritized fixes to resolve uncovered OWASP risks before deployment.

Does a thorough security review check for misconfigurations in services and pipelines?▼

Yes, a thorough security review checks for misconfigurations in services and CI/CD pipelines by applying a structured assessment to uncover OWASP risks, insecure patterns, and credential leakage.

Why do I need a structured security review before deploying my code?▼

You need a structured security review before deploying code to identify vulnerabilities, misconfigurations, and insecure patterns, preventing credential leakage and resolving OWASP risks early.

Related Skills

Explore More Software Engineering Skills→
igbuendigbuend
8

trivy

Execute Aqua Trivy security scans for vulnerabilities, secrets, and misconfigurations.

Community
Advanced
InfinityBowmanInfinityBowman
3

Security Patterns Analysis

Analyze codebases for security vulnerabilities and insecure patterns.

Community
Advanced
riftzen-bitriftzen-bit

springboot-security

Identify and remediate security misconfigurations in Java Spring Boot services.

Community
Advanced
steadyfallsteadyfall

canary

Monitor live applications for console errors and performance regressions after deployment.

Community
Advanced