Identify and report exploitable security vulnerabilities in code.
npx skills add https://github.com/SonPaier/carfect --skill security-review-sonpaier
Please help me install this Agent Skill. Skill: security-review Source: https://github.com/SonPaier/carfect/tree/main/.claude/skills/security-review Command: npx skills add https://github.com/SonPaier/carfect --skill security-review-sonpaier
This Skill identifies and reports potential security vulnerabilities in code, helping to prevent breaches and protect sensitive data.
Use the security-review skill to audit the provided Python code snippet for vulnerabilities.
High-intent search queries and answers about installing and using this skill.
A security code review detects exploitable vulnerabilities like injection flaws, XSS, and authentication issues by analyzing code for weaknesses. It prioritizes high-confidence findings based on confirmed attacker-controlled input and framework mitigations.
Confidence-based reporting prioritizes findings based on exploitability and impact, focusing on high-confidence issues. It confirms attacker-controlled input and checks framework mitigations to ensure reported vulnerabilities are exploitable.
Yes, OWASP Cheat Sheet Series references provide comprehensive vulnerability coverage for detecting injection flaws and XSS. The security review utilizes these references to analyze code and identify exploitable weaknesses.
Yes, a security review checks for authentication and cryptographic weaknesses alongside injection flaws and XSS. It analyzes code systematically to identify authorization issues and reports exploitable vulnerabilities.
You need a penetration testing audit before deploying new API endpoints to prevent breaches and protect sensitive data. It identifies potential vulnerabilities like SQL injection or insecure direct object references.
Limitations of automated vulnerability detection include focusing on high-confidence findings based on confirmed attacker-controlled input and framework mitigations. This prioritization may miss context-specific flaws requiring manual penetration testing.
sebafermanelliAudit code for security vulnerabilities and best practices.
zapabobScan dependencies and custom code for security vulnerabilities.
alex-tgkAutomate security assessments, threat modeling, and penetration testing via CLI tools.
salmanabdurrahmanTrace attacker-controlled JavaScript sources to dangerous execution sinks.
