skills.rest
SPeeDoA1
SPeeDoA1COMMUNITY
Explore all skills by this author →
GitHub

security-review

Review web applications and APIs for security vulnerabilities using a structured checklist.

6|Updated Jan 21, 2026
Search Tags:#authorization#OWASP#security#authentication#vulnerabilities#code-review#secure-coding
One-click install
npx skills add https://github.com/SPeeDoA1/everything-opencode --skill security-review-speedoa1
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/SPeeDoA1/everything-opencode/tree/main/.opencode/skills/core/security-review
Command: npx skills add https://github.com/SPeeDoA1/everything-opencode --skill security-review-speedoa1

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps teams perform comprehensive security reviews of codebases to identify vulnerabilities and strengthen defensive posture.

Core Features & Use Cases

  • Security checklist: Provides a structured approach covering authentication, authorization, input validation, secrets management, and secure headers.
  • Code review guidance: Demonstrates secure coding patterns with practical examples and best practices for web apps and APIs.
  • Use Case: During a new feature rollout, run the security review to ensure compliance with OWASP Top 10 and secure defaults across the deployment pipeline.

Quick Start

Run the security-review workflow on your repository to generate a vulnerability report.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a security review on my codebase to identify vulnerabilities?▼

Perform a security review by applying a structured checklist across authentication, authorization, input validation, data handling, dependencies, and configuration to identify vulnerabilities and generate a comprehensive report.

What does a code security audit cover for web applications and APIs?▼

A code security audit for web applications and APIs covers authentication, authorization, input validation, secrets management, secure headers, and configuration to identify vulnerabilities and ensure OWASP Top 10 compliance.

How do I check my code for OWASP Top 10 vulnerabilities during feature rollout?▼

Check code for OWASP Top 10 vulnerabilities during feature rollout by running a security review workflow that validates secure coding patterns and enforces secure defaults across the deployment pipeline.

Can I use this security checklist approach for both development and deployment audits?▼

Yes, you can apply this security checklist across web applications and APIs during development, deployment, and audits to provide secure coding recommendations and enforce secure defaults.

What is the best way to find authorization and authentication flaws in my API?▼

The best way to find authorization and authentication flaws in your API is to run a security review that applies practical secure coding examples and best practices to identify vulnerabilities in your codebase.

Related Skills

Explore More Software Engineering Skills→
alexander-danilenkoalexander-danilenko
14

security-reviewer

Automate security audits with SAST, dependency checks, and secrets scanning.

Community
Advanced
zapabobzapabob
2

sec-audit

Scan dependencies and custom code for security vulnerabilities.

Community
Advanced
riftzen-bitriftzen-bit

springboot-security

Identify and remediate security misconfigurations in Java Spring Boot services.

Community
Advanced
mohitmishra786mohitmishra786

security

Scan code, dependencies, containers, and cloud configurations for security vulnerabilities.

Community
Advanced