skills.rest
tuandzung
tuandzungCOMMUNITY
Explore all skills by this author →
GitHub

security-review

Scan codebases for OWASP Top 10 vulnerabilities and hardcoded secrets.

Updated Apr 2, 2026
Search Tags:#security review#code audit#dependency scan#vulnerability detection#authentication security
One-click install
npx skills add https://github.com/tuandzung/flink-k8s-ui --skill security-review-tuandzung
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/tuandzung/flink-k8s-ui/tree/main/.codex/skills/security-review
Command: npx skills add https://github.com/tuandzung/flink-k8s-ui --skill security-review-tuandzung

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill automates comprehensive security reviews for code, detecting and mitigating common vulnerabilities before deployment.

Core Features & Use Cases

  • OWASP Top 10 Scan: Identifies OWASP Top 10 vulnerabilities.
  • Secrets Detection: Finds hardcoded secrets in the code.
  • Input Validation: Ensures safe handling of user input.
  • Authentication/Authorization: Audits security of auth and authorization logic.
  • Dependency Security: Checks for outdated or vulnerable dependencies.
  • Use Case: Run the security-review skill to audit your codebase for vulnerabilities after development, before production deployment.

Quick Start

Execute the security-review skill on the codebase for a thorough security audit.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my codebase for OWASP Top 10 vulnerabilities?▼

To scan for OWASP Top 10 vulnerabilities, run a security review on your codebase to identify and mitigate common security issues. This process detects risks like hardcoded secrets and insecure authentication before deployment.

What is the best way to detect hardcoded secrets in source code?▼

Detecting hardcoded secrets is achieved by conducting an automated security audit of your codebase. This review identifies sensitive credentials left in the source and ensures safe handling of user input.

Can I check for vulnerable dependencies using npm audit during a code security review?▼

Yes, you can check for vulnerable dependencies using npm audit. A comprehensive security review integrates dependency scanning to find outdated or vulnerable packages before you deploy to production.

How does an automated code audit inspect authentication and authorization logic?▼

An automated code audit inspects authentication and authorization logic by scanning the codebase for security flaws. It verifies that access controls are properly implemented and validates secure handling of user input.

Do I need OWASP ZAP to perform a security review on my codebase?▼

OWASP ZAP is used to perform thorough security reviews alongside tools like npm audit. These tools help identify vulnerabilities, scan dependencies, and mitigate security issues before production deployment.

Related Skills

Explore More Software Engineering Skills→
luokai25luokai25

devsecops-expert

Integrates security scans into CI/CD pipelines automating vulnerability detection.

Community
Advanced
ACuberoACubero

security-audit

Detect security vulnerabilities and exposed secrets in software projects.

Community
Advanced
BagelHoleBagelHole
46

dast-scanning

Perform DAST scans on web applications and APIs with OWASP ZAP.

Community
Intermediate
LeoWSY-hashblueLeoWSY-hashblue
3

source-code-scanning

Scan source code for vulnerabilities, secrets, and dependency CVEs.

Community
Advanced