What problem does it solve?
This Skill helps identify security vulnerabilities, exposed secrets, unsafe input handling, authentication weaknesses, and dependency risks before they can affect users or production systems.
Core Features & Use Cases
- OWASP Top 10 Analysis: Review code for access-control flaws, injection, cryptographic failures, misconfiguration, SSRF, and other common vulnerabilities.
- Secrets and Input Validation Checks: Detect hardcoded credentials, unsafe user input, path traversal, XSS, command injection, and insecure data handling.
- Authentication and Dependency Review: Assess password hashing, session management, authorization controls, JWT usage, dependency vulnerabilities, and remediation priorities.
- Use Case: Audit a new API authentication module before deployment and receive severity-ranked findings with file locations, CVE references, remediation guidance, and an overall security posture assessment.
Quick Start
Use the security-review skill to audit the authentication and API code for OWASP vulnerabilities, exposed secrets, dependency risks, and actionable remediation steps.