security-review

Review code for OWASP Top 10 vulnerabilities across authentication, authorization, and input validation.

1|Updated Jan 20, 2026
One-click install
npx skills add https://github.com/tubone24/claude-code-settings --skill security-review-tubone24
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/tubone24/claude-code-settings/tree/main/skills/workflows/security-review
Command: npx skills add https://github.com/tubone24/claude-code-settings --skill security-review-tubone24

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Helps development teams identify and remediate security gaps in their codebase by providing a structured, OWASP-aligned review framework and practical checklists.

Core Features & Use Cases

  • OWASP Top 10 aligned checks across authentication, authorization, input validation, cryptography, and logging.
  • Practical implementation patterns, secure design guidance, and deployment monitoring references.
  • Use Case: Incorporate checks into pull request reviews to surface vulnerabilities before merge and to reinforce secure development practices.

Quick Start

Run a security review on a new API endpoint to surface vulnerabilities and enforce best practices.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform an OWASP Top 10 security review on my code?

An OWASP-aligned security review identifies and remediates code vulnerabilities using structured checklists. It covers authentication, authorization, input validation, secret management, and API security to surface gaps before merging code.

What is the best way to check my API endpoints for web application security vulnerabilities?

Web application security checks for API endpoints validate authentication, authorization, input validation, and API security protocols. Running a structured review surfaces vulnerabilities and enforces secure development practices during pull requests.

How does a code security review framework handle secret management and dependency health?

A code security review framework handles secret management and dependency health by systematically checking for exposed credentials and evaluating dependency vulnerabilities. This ensures secure design and deployment monitoring across software projects.

Can I incorporate security checks into my pull request reviews to prevent vulnerabilities?

Yes, you can incorporate security checks into pull request reviews to prevent vulnerabilities. Applying an OWASP-aligned review framework surfaces security gaps before merge and reinforces secure development practices across the codebase.

What areas of code does an OWASP-aligned security review cover?

An OWASP-aligned security review covers authentication, authorization, input validation, cryptography, secret management, API security, payments, logging, and dependency health across software projects to identify and remediate vulnerabilities.

When do I need a structured security review framework for my software project?

You need a structured security review framework when developing software projects that handle authentication, payments, or APIs. It provides practical implementation patterns and secure design guidance to identify and remediate vulnerabilities.