skills.rest
sigridjineth
sigridjinethCOMMUNITY
Explore all skills by this author →
GitHub

security-review

Audit codebases for OWASP Top 10 vulnerabilities, hardcoded secrets, and insecure input validation.

20|6|Updated Feb 13, 2026
Search Tags:#code review#security#vulnerability#owasp#audit#secrets
One-click install
npx skills add https://github.com/sigridjineth/oh-my-codex --skill security-review-sigridjineth
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/sigridjineth/oh-my-codex/tree/main/skills/security-review
Command: npx skills add https://github.com/sigridjineth/oh-my-codex --skill security-review-sigridjineth

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill addresses the critical need for robust code security by automating the detection of common vulnerabilities, hardcoded secrets, and insecure coding practices, ensuring your applications are protected against potential threats.

Core Features & Use Cases

  • OWASP Top 10 Scan: Identifies vulnerabilities across the ten most critical web application security risks.
  • Secrets Detection: Scans for hardcoded API keys, passwords, and other sensitive credentials.
  • Input Validation Review: Checks for common injection flaws (SQL, XSS, command) and improper sanitization.
  • Dependency Vulnerability Scan: Utilizes npm audit to find known issues in project dependencies.
  • Use Case: After implementing a new payment processing module, run this skill to proactively identify and fix any security flaws before they can be exploited.

Quick Start

Run a comprehensive security review on the current codebase.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my codebase for OWASP Top 10 vulnerabilities automatically?▼

Automated security audits scan your codebase to identify OWASP Top 10 vulnerabilities by analyzing insecure input validation patterns and improper sanitization. This process detects injection flaws like SQL, XSS, and command injections before deployment.

What is the best way to find hardcoded secrets and API keys in my code?▼

Finding hardcoded secrets involves scanning your codebase for sensitive credentials like API keys and passwords. Automated secrets detection reviews source files to proactively identify exposed credentials before they can be exploited in production environments.

Can I use npm audit to check dependencies for known vulnerabilities?▼

Yes, npm audit checks dependencies for known vulnerabilities. The security review utilizes npm audit to scan project dependencies, identifying known issues and insecure packages within your DevOps workflows for continuous security monitoring.

How does automated code review detect SQL injection and XSS flaws?▼

Automated code review detects SQL injection and XSS flaws by checking for insecure input validation patterns and improper sanitization. It analyzes source code logic to identify common injection vulnerabilities across the OWASP Top 10 risks.

When do I need to run a security audit on my payment processing module?▼

You need to run a security audit on your payment processing module after implementing new features to proactively identify and fix security flaws. Pre-deployment checks ensure your codebase is protected against potential threats before release.

Related Skills

Explore More Software Engineering Skills→
JStaRFilmsJStaRFilms
23

jstar-reviewer

Configure and run J-Star Reviewer review and audit flows.

Community
Intermediate
GaryOcean428GaryOcean428

security-audit

Detect secrets, insecure dependencies, and vulnerable patterns in codebases.

Community
Advanced
olehsvyrydovolehsvyrydov
13

devops-engineer

Automate cloud infrastructure provisioning with Terraform, Kubernetes, and CI/CD pipelines.

Community
Advanced
ArianHobson333ArianHobson333
7

system

Identify and exploit Active Directory and operating system vulnerabilities.

Community
Advanced