security-review

Audits code for OWASP Top 10 vulnerabilities, hardcoded secrets, and unsafe patterns.

Updated Jun 27, 2026
One-click install
npx skills add https://github.com/truongnat/aix --skill security-review-truongnat
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/truongnat/aix/tree/main/content/skills/security-review
Command: npx skills add https://github.com/truongnat/aix --skill security-review-truongnat

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires OWASP ZAP, bandit, npm audit, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides a comprehensive security review of code, identifying potential vulnerabilities and ensuring adherence to best practices.

Core Features & Use Cases

  • Security Auditing: Checks for OWASP Top 10 vulnerabilities, hardcoded secrets, and unsafe patterns.
  • Comprehensive Analysis: Covers code, configuration, and dependencies for a holistic security posture.
  • Use Case: Before deploying a new feature, run this Skill to automatically scan and report on security issues, helping to prevent data breaches and maintain code integrity.

Quick Start

Run a security review on the 'main' branch of the codebase.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I conduct a security audit to check for OWASP Top 10 vulnerabilities in my codebase?

A security audit checks your codebase for OWASP Top 10 vulnerabilities, hardcoded secrets, and unsafe patterns. This Skill automates that process by scanning code, configurations, and dependencies to report potential security issues.

What's the best way to scan for hardcoded secrets and unsafe code patterns before deployment?

Scanning for hardcoded secrets and unsafe patterns requires automated security analysis tools. This Skill uses pattern matching and secret detection to perform comprehensive security reviews before you deploy new features.

Do I need OWASP ZAP, bandit, and npm audit installed to run a vulnerability assessment?

Yes, running a vulnerability assessment with this Skill requires OWASP ZAP, bandit, and npm audit. These dependencies provide the pattern matching, secret detection, and dependency scanning capabilities needed for comprehensive security auditing.

Can I use this security review tool to scan dependency configurations for any codebase?

Yes, you can use this security review tool to scan dependency configurations for any codebase. It performs holistic vulnerability assessments covering code, configuration, and dependencies regardless of your specific platform.

How does automated dependency scanning improve code security and prevent data breaches?

Automated dependency scanning improves code security by identifying known vulnerabilities in your project libraries. By detecting these flaws during a security audit, it helps prevent data breaches and maintain overall code integrity.

What are the limitations of using bandit and npm audit for code security analysis?

Bandit and npm audit focus on Python and Node.js dependency scanning respectively, meaning code security analysis may require additional pattern matching for other languages to ensure complete OWASP Top 10 vulnerability coverage.