security-review

Audit application code for OWASP Top 10 vulnerabilities.

Updated Aug 27, 2026
One-click install
npx skills add https://github.com/petrogurcak/skills --skill security-review-petrogurcak
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/petrogurcak/skills/tree/main/plugins/review/skills/security-review
Command: npx skills add https://github.com/petrogurcak/skills --skill security-review-petrogurcak

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill identifies and helps mitigate common security vulnerabilities in application code, ensuring a more robust and secure software product.

Core Features & Use Cases

  • OWASP Top 10 Audit: Checks for critical vulnerabilities like Injection, Broken Authentication, XSS, and Broken Access Control.
  • Pre-Deployment Check: Ideal for reviewing code before it goes live, especially after sensitive feature additions.
  • Use Case: Before deploying a new e-commerce feature with payment processing, run a security review to catch potential SQL injection or sensitive data exposure flaws.

Quick Start

Perform a security review of the provided code, focusing on OWASP Top 10 vulnerabilities.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit my application code for OWASP Top 10 vulnerabilities?▼

A security audit checks application code patterns against known OWASP Top 10 vulnerability types, identifying issues like SQL injection, XSS, CSRF, broken authentication, sensitive data exposure, and access control flaws.

What is the best way to check code for SQL injection and XSS before deployment?▼

Running a pre-deployment security review checks code patterns to catch potential SQL injection, XSS, and sensitive data exposure flaws before features go live, ensuring a robust and secure software product.

Can I use a security review to detect broken access control and sensitive data exposure?▼

Yes, a security review targets broken access control and sensitive data exposure by analyzing application code patterns against known vulnerability types identified in the OWASP Top 10.

Does this security audit work for deep code reviews of payment processing features?▼

Yes, the security audit is ideal for deep code reviews of payment processing features, analyzing code patterns to catch potential SQL injection or sensitive data exposure flaws before deployment.

When do I need to run a secure coding vulnerability audit?▼

You need to run a secure coding vulnerability audit during pre-deployment checks and after sensitive feature additions to identify and mitigate common security vulnerabilities in application code.