security-review-skill

Identify and remediate OWASP Top 10 security vulnerabilities in code.

1|Updated Dec 21, 2025
One-click install
npx skills add https://github.com/DIO0550/d-market --skill security-review-skill
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-review-skill
Source: https://github.com/DIO0550/d-market/tree/main/plugins/code-review-plugin/skills/security-review-skill
Command: npx skills add https://github.com/DIO0550/d-market --skill security-review-skill

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

セキュリティレビュープロセスの手間と見落としを減らすため、コードのセキュリティ脆弱性を体系的に評価します。

Core Features & Use Cases

  • OWASP Top 10に基づく脆弱性チェックの自動化と要件の共有
  • コードレビューの品質向上とセキュリティ設計のガイダンス提供
  • Use Case: Webアプリケーションの新規機能追加時にセキュリティリスクを検出・修正

Quick Start

Run a security review on your codebase to identify OWASP Top 10 vulnerabilities and document actionable fixes.

Frequently Asked Questions about security-review-skill

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform an OWASP Top 10 security review on my web application code?

An OWASP Top 10 security review systematically evaluates your web application code to identify vulnerabilities in input validation, authentication, authorization, encryption, and logging, then documents actionable fixes.

What is the best way to automate secure coding checks for new features?

Automating secure coding checks for new features involves applying structured static analysis against OWASP Top 10 guidance to detect and remediate security risks early in the development lifecycle.

Does this static analysis tool check for vulnerabilities in services and libraries?

Yes, this static analysis tool applies security checks across web applications, services, and libraries to verify input validation, authentication, authorization, encryption, and logging mechanisms.

Can I use this security review skill to detect input validation and authorization flaws?

Yes, you can use this security review skill to detect input validation and authorization flaws by leveraging referenced security patterns and OWASP Top 10 guidance to structure the code evaluation.

Why do I need an OWASP-aligned code review instead of a standard peer review?

An OWASP-aligned code review is needed to reduce manual effort and oversight by systematically assessing code security vulnerabilities, ensuring quality guidance that standard peer reviews often miss.