security-review

Scan codebases for OWASP Top 10 vulnerabilities and hardcoded secrets.

Updated Apr 2, 2026

Search Tags:#security review #code audit #dependency scan #vulnerability detection #authentication security

Ready to run

npx skills add https://github.com/tuandzung/flink-k8s-ui --skill security-review-tuandzung

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/tuandzung/flink-k8s-ui/tree/main/.codex/skills/security-review
Command: npx skills add https://github.com/tuandzung/flink-k8s-ui --skill security-review-tuandzung

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill automates comprehensive security reviews for code, detecting and mitigating common vulnerabilities before deployment.

Core Features & Use Cases

OWASP Top 10 Scan: Identifies OWASP Top 10 vulnerabilities.
Secrets Detection: Finds hardcoded secrets in the code.
Input Validation: Ensures safe handling of user input.
Authentication/Authorization: Audits security of auth and authorization logic.
Dependency Security: Checks for outdated or vulnerable dependencies.
Use Case: Run the security-review skill to audit your codebase for vulnerabilities after development, before production deployment.

Quick Start

Execute the security-review skill on the codebase for a thorough security audit.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I scan my codebase for OWASP Top 10 vulnerabilities?▼

To scan for OWASP Top 10 vulnerabilities, run a security review on your codebase to identify and mitigate common security issues. This process detects risks like hardcoded secrets and insecure authentication before deployment.

What is the best way to detect hardcoded secrets in source code?▼

Detecting hardcoded secrets is achieved by conducting an automated security audit of your codebase. This review identifies sensitive credentials left in the source and ensures safe handling of user input.

Can I check for vulnerable dependencies using npm audit during a code security review?▼

Yes, you can check for vulnerable dependencies using npm audit. A comprehensive security review integrates dependency scanning to find outdated or vulnerable packages before you deploy to production.

How does an automated code audit inspect authentication and authorization logic?▼

An automated code audit inspects authentication and authorization logic by scanning the codebase for security flaws. It verifies that access controls are properly implemented and validates secure handling of user input.

Do I need OWASP ZAP to perform a security review on my codebase?▼

OWASP ZAP is used to perform thorough security reviews alongside tools like npm audit. These tools help identify vulnerabilities, scan dependencies, and mitigate security issues before production deployment.