skills.rest
trevorbyrum
trevorbyrumCOMMUNITY
Explore all skills by this author →
GitHub

security-review

Audit codebases for security vulnerabilities and prioritize findings into P0, P1, and P2 tiers.

1|1|Updated Mar 9, 2026
Search Tags:#code review#security#vulnerability#owasp#audit#compliance
One-click install
npx skills add https://github.com/trevorbyrum/claude-skills-suite --skill security-review-trevorbyrum
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/trevorbyrum/claude-skills-suite/tree/main/skills/security-review
Command: npx skills add https://github.com/trevorbyrum/claude-skills-suite --skill security-review-trevorbyrum

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill identifies and prioritizes security vulnerabilities in your codebase, preventing critical issues from reaching production and ensuring compliance with security best practices.

Core Features & Use Cases

  • Comprehensive Audits: Scans for secrets, dependency vulnerabilities, auth flaws, injection risks, and more.
  • Prioritized Findings: Classifies issues into P0 (Block), P1 (Review), and P2 (Advisory) tiers.
  • Use Case: Before deploying a new feature, run this Skill to catch hardcoded API keys, vulnerable dependencies, or insecure authentication logic, ensuring a secure release.

Quick Start

Run a full security audit on the current codebase and report any P0 findings.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a security audit on my codebase to find vulnerabilities?▼

A security audit scans your codebase for vulnerabilities across secrets exposure, dependencies, authentication, and input validation. It prioritizes findings into P0, P1, and P2 tiers based on OWASP and CWE standards, providing actionable remediation steps.

What is the best way to check code for hardcoded API keys before deployment?▼

Checking code for hardcoded API keys is handled by performing a comprehensive security audit. This scan identifies exposed secrets and prioritizes them as P0 blockers to prevent critical issues from reaching production and ensure secure deployment.

Does automated vulnerability scanning cover infrastructure as code and network configuration?▼

Automated vulnerability scanning covers infrastructure as code and network configuration. The audit comprehensively analyzes these areas alongside authentication and input validation, identifying weaknesses and classifying them by severity using common CWEs.

How are security vulnerabilities prioritized during an OWASP compliance audit?▼

During an OWASP compliance audit, vulnerabilities are prioritized into P0 (Block), P1 (Review), and P2 (Advisory) tiers. This classification is based on the OWASP Agentic Top 10 and common CWEs, ensuring critical issues are addressed first.

Can I use this security audit for agent-specific patterns and authentication flaws?▼

You can use this security audit for agent-specific patterns and authentication flaws. It comprehensively scans these areas, identifying vulnerabilities and providing actionable remediation steps to ensure secure software development and deployment.

Related Skills

Explore More Software Engineering Skills→
apacheapache
79

magpie-dependency-audit

Scan project dependencies for known vulnerabilities and propose upgrades.

Official
Advanced
imsaifimsaif
3

Test Generation

Generate targeted tests for UI components, hooks, and utilities to close coverage gaps.

Community
Intermediate
LuisSambranoLuisSambrano
7

code-review

Perform systematic code review and static analysis across multiple programming languages.

Community
Advanced
az9713az9713

dependency-audit

Audit project dependencies for vulnerabilities, license issues, and bloat.

Community
Intermediate