skills.rest
thoreinstein
thoreinsteinCOMMUNITY
Explore all skills by this author →
GitHub

security-review

Identify and document security risks across repository authentication, secrets, configuration, dependencies, and data handling.

5|2|Updated Dec 11, 2025
Search Tags:#codebase#enterprise#secrets#risk-assessment#security-review#authN#authZ
One-click install
npx skills add https://github.com/thoreinstein/opencode-config --skill security-review-thoreinstein
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/thoreinstein/opencode-config/tree/main/skill/security-review
Command: npx skills add https://github.com/thoreinstein/opencode-config --skill security-review-thoreinstein

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps security teams and developers identify and remediate security risks across a codebase, including authentication flows, authorization boundaries, secrets handling, configuration management, dependencies, and data handling practices.

Core Features & Use Cases

  • Scope-driven assessment: Can perform full-repo reviews or target specific areas (backend, frontend, infra, CI/CD, configs) to surface risks.
  • Structured findings: Generates prioritized, actionable security findings aligned with enterprise AppSec standards.
  • Governance & compliance support: Assists in documenting security posture for audits and policy enforcement.

Quick Start

Run the security-review skill against the repository root to perform a full enterprise security assessment.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform an enterprise security review on my codebase?▼

To perform an enterprise security review, run this analysis against your repository root to identify and document risks across authN, authZ, secrets, dependencies, and data handling. It generates a prioritized report aligned with enterprise AppSec standards.

Can I scope a security risk assessment to just my backend or CI/CD configuration?▼

Yes, you can scope a security risk assessment to specific areas like backend, frontend, infra, CI/CD, or configs. The review maps targeted surfaces to produce structured findings without assessing the full repository.

What is included in an AppSec security findings report?▼

An AppSec security findings report includes prioritized, actionable documentation of security risks found in authentication flows, authorization boundaries, secrets handling, configuration management, dependencies, and data handling practices.

Does this security review check for secrets and configuration vulnerabilities?▼

Yes, the security review checks for secrets and configuration vulnerabilities by identifying and documenting security risks across secrets handling, configuration management, dependencies, and data handling practices.

What's the best way to document security posture for compliance audits?▼

The best way to document security posture for compliance audits is using a structured security review that enforces scope resolution and surface mapping, generating a formal findings report aligned with enterprise AppSec governance standards.

Related Skills

Explore More Software Engineering Skills→
iludeilude
8

security-first-design

Evaluate security risks across architecture, code reviews, and feature planning.

Community
Basic
bricerisingbricerising
7

security

Enforce authentication, authorization, input validation, and secure data handling guardrails.

Community
Advanced
rahlplxrahlplx

vulnerability-scanner

Scan codebases for dependency, secret, pattern, and configuration security risks.

Community
Intermediate
DonTiziDonTizi
2

security-audit

Scan codebases for secrets, OWASP risks, and vulnerable dependencies.

Community
Advanced