skills.rest
Protagonistss
ProtagonistssCOMMUNITY
Explore all skills by this author →
Website𝕏@protagonisthssGitHub

security-review

Review code for vulnerabilities and assess risk against OWASP Top 10 2021.

Updated Nov 25, 2025
Search Tags:#authorization#security#authentication#vulnerability#owasp#risk-assessment#code-review
One-click install
npx skills add https://github.com/Protagonistss/ithinku-plugins --skill security-review-protagonistss
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/Protagonistss/ithinku-plugins/tree/main/plugins/code-review/skills/security-review
Command: npx skills add https://github.com/Protagonistss/ithinku-plugins --skill security-review-protagonistss

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

代码安全审查与漏洞风险评估能力，帮助团队在代码生命周期中快速发现并评估安全风险，提升代码质量和合规性。

Core Features & Use Cases

  • 基于 OWASP 标准的自动化安全检查与风险评估
  • 识别常见漏洞（注入、XSS、认证与授权、敏感数据处理等）并给出修复建议
  • 适用于代码审查、CI/CD 集成和部署前的安全加固场景

Quick Start

Execute a security review on a codebase and receive a prioritized remediation plan.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a code security review to identify injection and XSS vulnerabilities?▼

A code security review identifies injection and XSS vulnerabilities by scanning the codebase against the OWASP Top 10 2021 standards. It assesses security risks and provides concrete remediation guidance to ensure robust data handling.

What is a security risk assessment based on the OWASP Top 10 2021?▼

An OWASP Top 10 2021 security risk assessment evaluates software projects to find common vulnerabilities like authentication flaws and data handling risks. It helps teams quickly discover security gaps and improve compliance during code reviews.

Can I use an automated security check across different programming languages?▼

Yes, automated security checks can be applied across different programming languages to identify vulnerabilities. The review focuses on common risks like injection, XSS, and authorization issues regardless of the language, providing prioritized remediation plans.

How do I integrate vulnerability scanning into my CI/CD pipeline for deployment hardening?▼

Integrate vulnerability scanning into your CI/CD pipeline to automate security checks before deployment. This process identifies risks like injection and authentication flaws early, providing a prioritized remediation plan to harden your codebase.

Does code security scanning cover authentication and authorization risks?▼

Yes, code security scanning comprehensively covers authentication and authorization risks. It evaluates access controls and sensitive data handling against OWASP standards to detect vulnerabilities and provide targeted remediation guidance.

Related Skills

Explore More Software Engineering Skills→
BasharAmsoBasharAmso
1

Security Audit

Audit code and dependencies for security vulnerabilities and generate a severity-rated report.

Community
Advanced
weirdgmeweirdgme
4

devsecops

Automate security integration across CI/CD pipelines with policy-as-code enforcement.

Community
Advanced
AytsuuAytsuu

repo-scan

Audit source code files, detect third-party libraries, and generate four-level module verdicts.

Community
Advanced
AnsteorraAnsteorra
6

security-audit

Perform static and dynamic security audits on the KMP application.

Official
Advanced