security-review

Identify vulnerabilities across code, infrastructure, and workflows with risk classification.

285|39|Updated Mar 16, 2026
One-click install
npx skills add https://github.com/shawnpang/startup-founder-skills --skill security-review-shawnpang
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/shawnpang/startup-founder-skills/tree/main/skills/security-review
Command: npx skills add https://github.com/shawnpang/startup-founder-skills --skill security-review-shawnpang

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Conduct comprehensive security evaluations to uncover vulnerabilities, misconfigurations, and design flaws across code, infrastructure, and processes, enabling proactive risk reduction.

Core Features & Use Cases

  • Threat modeling and architecture review to identify attack surfaces
  • Dependency scanning, secrets detection, and compliance checks
  • Auth flow and access control audit to prevent privilege escalation
  • Actionable remediation guidance and risk-based prioritization

Quick Start

Run a full security review on a web application, including threat modeling, dependency checks, and an authentication flow audit.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a comprehensive security review on my web application before launch?

A comprehensive security review evaluates your web application by guiding automated scanning and manual review across code, configurations, and deployments to identify vulnerabilities and design flaws before launch.

What is threat modeling and how does it identify attack surfaces in my software?

Threat modeling is an architecture review process that identifies potential attack surfaces in software. It maps out vulnerabilities and design flaws across your infrastructure and workflows to enable proactive risk reduction.

How do I audit authentication flows to prevent privilege escalation?

You audit authentication flows by reviewing access controls to prevent privilege escalation. This process evaluates your auth flow mechanisms to ensure users cannot gain unauthorized access levels.

Can I run dependency scanning and secrets detection for compliance preparation?

Yes, you can run dependency scanning and secrets detection during compliance preparation. This checks your software components for known vulnerabilities and exposed secrets to ensure your security posture meets compliance requirements.

What's the best way to prioritize vulnerability remediation after a security alert?

The best way to prioritize vulnerability remediation after a security alert is through risk-based classification. This approach structures outputs into actionable remediation guidance, prioritizing fixes based on the severity and impact of identified vulnerabilities.