security-review

Identify and prioritize security vulnerabilities with OWASP Top 10 analysis.

20|6|Updated Feb 13, 2026
One-click install
npx skills add https://github.com/realsigridjin/oh-my-codex --skill security-review-realsigridjin
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/realsigridjin/oh-my-codex/tree/main/skills/security-review
Command: npx skills add https://github.com/realsigridjin/oh-my-codex --skill security-review-realsigridjin

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps identify security vulnerabilities, exposed secrets, unsafe input handling, authentication weaknesses, and dependency risks before they can affect users or production systems.

Core Features & Use Cases

  • OWASP Top 10 Analysis: Review code for access-control flaws, injection, cryptographic failures, misconfiguration, SSRF, and other common vulnerabilities.
  • Secrets and Input Validation Checks: Detect hardcoded credentials, unsafe user input, path traversal, XSS, command injection, and insecure data handling.
  • Authentication and Dependency Review: Assess password hashing, session management, authorization controls, JWT usage, dependency vulnerabilities, and remediation priorities.
  • Use Case: Audit a new API authentication module before deployment and receive severity-ranked findings with file locations, CVE references, remediation guidance, and an overall security posture assessment.

Quick Start

Use the security-review skill to audit the authentication and API code for OWASP vulnerabilities, exposed secrets, dependency risks, and actionable remediation steps.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
What steps are needed to validate cryptography and remediate codebase security vulnerabilities?

Validate cryptography and remediate vulnerabilities by reviewing cryptographic failures, unsafe data handling, and dependency risks. This generates severity-ranked reporting with actionable remediation guidance to resolve critical security flaws early.

How do I run an OWASP Top 10 security audit on my API codebase?

To run an OWASP Top 10 security audit, review your API codebase for access-control flaws, injection risks, and cryptographic failures. This process identifies vulnerabilities and provides severity-ranked findings with specific file locations and remediation steps.

What is the best way to detect hardcoded secrets and unsafe user input handling?

Detect hardcoded secrets and unsafe user input by scanning for exposed credentials, path traversal, XSS, and command injection. This validates input handling and pinpoints insecure data processing within your application code.

Can I check dependency vulnerabilities and JWT authentication risks before deployment?

You can check dependency vulnerabilities and JWT risks by assessing password hashing, session management, and authorization controls. This validates external dependency updates and yields remediation priorities to fix before production deployment.

How does a pre-production security review identify access-control flaws and SSRF risks?

A pre-production security review identifies access-control flaws and SSRF risks by applying OWASP analysis to your codebase. It assesses authentication changes and API endpoints, returning an overall security posture assessment with CVE references.

What steps are needed to validate cryptography and remediate codebase security vulnerabilities?

Validate cryptography and remediate vulnerabilities by reviewing cryptographic failures, unsafe data handling, and dependency risks. This generates severity-ranked reporting with actionable remediation guidance to resolve critical security flaws early.