skills.rest
TheLineExp
TheLineExpCOMMUNITY
Explore all skills by this author →
GitHub

security-review

Apply OWASP Top 10 and project-specific addon rules to code changes.

Updated Aug 23, 2026
Search Tags:#security#owasp#audit#compliance#code-review#addons
One-click install
npx skills add https://github.com/TheLineExp/claude-code-platform --skill security-review-thelineexp
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/TheLineExp/claude-code-platform/tree/main/.claude/skills/security-review
Command: npx skills add https://github.com/TheLineExp/claude-code-platform --skill security-review-thelineexp

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Security audits for code changes help identify authentication, authorization, input validation, secrets management, and compliance gaps before they reach production.

Core Features & Use Cases

  • OWASP Top 10 alignment and project-specific addon checks
  • Step-by-step review workflow for pull requests, pre-commit, and post-change audits
  • Supports project-specific security profiles via addons and addons readme references

Quick Start

Run a security review on the current branch to generate a structured risk report.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I identify security gaps in code changes before they reach production?▼

To identify security gaps in code changes, this Skill applies OWASP Top 10 rules and project-specific addon checks to modified files, generating a structured risk ranking for pull requests and pre-commit audits.

What is the best way to automate a pre-commit security audit for a pull request?▼

The best way to automate a pre-commit security audit is by running this Skill on your current branch, which applies OWASP alignment and addon rules to modified files to output a structured risk report.

Does this security code review tool support custom compliance rules for my tech stack?▼

Yes, this security code review tool supports custom compliance rules by enforcing project-specific security profiles defined in a `.claude/security-review-addons.md` file across diverse tech stacks.

How do I run an OWASP Top 10 audit on modified files across different tech stacks?▼

You can run an OWASP Top 10 audit on modified files across diverse tech stacks by executing this Skill, which evaluates code changes step-by-step and outputs a structured risk ranking.

Can I use project-specific addon checks for post-change security audits?▼

Yes, you can use project-specific addon checks for post-change security audits by configuring your rules in the addons file, which the Skill reads to evaluate modified files against your custom profiles.

What kind of output does the security review generate for a code change?▼

The security review for a code change generates a structured risk ranking that identifies authentication, authorization, input validation, and secrets management gaps based on OWASP Top 10 and addon rules.

Related Skills

Explore More Software Engineering Skills→
supermalangsupermalang

security-audit

Audit modified files for OWASP Top 10 security vulnerabilities and policy violations.

Community
Advanced
devsepninedevsepnine
1

security-review

Identify and remediate security vulnerabilities in codebases across authentication, authorization, input validation, secret management, and API security domains.

Community
Advanced
luongnv89luongnv89
104

devops-pipeline

Automate pre-commit hooks and GitHub Actions for code quality.

Community
Advanced
michaelalbermichaelalber
2

dotnet-security-review

Review .NET applications for OWASP Top 10 vulnerabilities and Telerik CVEs.

Community
Advanced