skills.rest
Rene-Kuhm
Rene-KuhmCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

security-review

Identify and report OWASP Top 10 security vulnerabilities in codebases.

1|Updated Jan 5, 2026
Search Tags:#security#owasp#vulnerabilities#static-analysis#code-review#semgrep
One-click install
npx skills add https://github.com/Rene-Kuhm/opencode-ohmyopencode-claude-configuracion --skill security-review-rene-kuhm
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/Rene-Kuhm/opencode-ohmyopencode-claude-configuracion/tree/main/skills/security-review
Command: npx skills add https://github.com/Rene-Kuhm/opencode-ohmyopencode-claude-configuracion --skill security-review-rene-kuhm

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Auditar código para identificar y mitigar vulnerabilidades basadas en OWASP Top 10, permitiendo a equipos entregar software más seguro.

Core Features & Use Cases

  • Auditoría alineada con OWASP Top 10 (A1–A10) para aplicaciones web y APIs.
  • Análisis estático y búsqueda de patrones para detectar vulnerabilidades comunes.
  • Orientación de remediación y buenas prácticas de seguridad para el diseño y la implementación.

Quick Start

Realiza una revisión de seguridad de un repositorio y genera un informe de auditoría alineado con OWASP Top 10.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform an OWASP Top 10 security audit on my codebase?▼

Static analysis detects OWASP Top 10 vulnerabilities by pattern-matching code against known security flaws. It evaluates web and API services during code reviews or pull requests to identify risks and provide targeted remediation guidance.

Can I use static analysis to find OWASP vulnerabilities in web and API services?▼

Yes, static analysis effectively finds OWASP vulnerabilities in web and API services by scanning source code for insecure patterns. It supports ongoing security assessments and code reviews to ensure your application aligns with secure software delivery requirements.

What is the best way to automate code reviews for security vulnerabilities?▼

Automating code reviews for security vulnerabilities involves integrating static analysis into your pipeline to check for OWASP Top 10 flaws. This approach continuously evaluates web and API codebases during pull requests, supplying remediation guidance for detected issues.

Does static analysis with Semgrep cover all OWASP Top 10 vulnerabilities?▼

Static analysis with Semgrep covers OWASP Top 10 vulnerabilities by scanning codebases for known insecure patterns across A1 through A10. It applies to web and API services, delivering pattern-matching results and remediation guidance for secure software delivery.

How do I get remediation guidance for security vulnerabilities found during a code review?▼

Remediation guidance for security vulnerabilities found during a code review is generated alongside the static analysis report. It outlines best practices to fix identified OWASP Top 10 flaws, helping teams implement secure design and code patterns effectively.

Related Skills

Explore More Software Engineering Skills→
JeromyJSmithJeromyJSmith
3

source-command-gf-setup

Initialize Graphify code graph analysis for the LATTICE repository.

Community
Basic
hopeoverturehopeoverture
6

a11y-checker-ci

Automate WCAG accessibility checks in CI/CD pipelines and generate PR reports.

Community
Advanced
gaoqiongxiegaoqiongxie
1

security-audit

Audit codebases for OWASP Top 10 vulnerabilities and hardcoded secrets.

Community
Advanced
BagelHoleBagelHole
46

dast-scanning

Perform DAST scans on web applications and APIs with OWASP ZAP.

Community
Intermediate