security-review

Secret detection scans your source code and repositories to identify leaked credentials, API keys, and sensitive configuration data. The security-review Skill automatically flags exposed secrets across code changes and produces a structured report with severity classifications to prioritize remediation.

Vulnerability analysis scans your project dependencies against known security databases to identify outdated or compromised packages. The Skill generates dependency vulnerability assessments aligned with OWASP standards and includes them in the Security Review Report.

The Skill performs an OWASP checklist evaluation covering injection flaws, broken authentication, sensitive data exposure, and other major categories. It reviews source code, CI/CD pipelines, and container deployments to identify misconfigurations and produces a comprehensive report with remediation recommendations.

Security reviews analyze code changes to detect exposure of credentials, injection vulnerabilities, authentication and authorization problems, insecure API usage, weak encryption, and misconfigurations. The Skill runs against latest commits or PRs and generates a structured Security Review Report with severity classifications.

Yes, the Skill applies security scanning to source code repositories, CI/CD pipelines, and container deployments. It identifies vulnerabilities across your entire deployment workflow and produces actionable remediation plans aligned with OWASP standards.

The Skill produces a structured Security Review Report with severity classifications for each detected issue. The report includes secret scanning results, dependency vulnerability assessments, environment variable reviews, input validation checks, and API security findings to guide remediation.