security-review

Identify security vulnerabilities in code changes across OWASP Top 10 areas.

3|Updated Jan 22, 2026
One-click install
npx skills add https://github.com/utkudarilmaz/claude-code-setup --skill security-review-utkudarilmaz
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/utkudarilmaz/claude-code-setup/tree/main/.claude/skills/security-review
Command: npx skills add https://github.com/utkudarilmaz/claude-code-setup --skill security-review-utkudarilmaz

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Automates the security review process to identify vulnerabilities in code changes before release, focusing on authentication, input validation, data exposure, secrets management, and OWASP Top 10 coverage.

Core Features & Use Cases

  • Dispatches a dedicated security-reviewer agent to identify vulnerabilities in authentication, input validation, data exposure, secrets, and OWASP Top 10 areas.
  • Applies to authentication modules, API endpoints, data processing paths, and code handling sensitive information, enabling default, scoped, and comprehensive audits.
  • Provides structured findings with severity ratings, remediation guidance, and a repeatable workflow for secure releases.

Quick Start

Invoke the default security review on the latest changes by issuing /security-review.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate security code reviews for OWASP Top 10 vulnerabilities?

To automate security code reviews for OWASP Top 10 vulnerabilities, dispatch a dedicated reviewer agent to identify risks in code changes. This provides structured findings with severity ratings and remediation guidance across authentication, input validation, and data exposure areas.

What is involved in a security review for authentication and API endpoints?

A security review for authentication and API endpoints involves mapping the attack surface and identifying vulnerabilities in data processing paths. It targets secrets management and input validation, delivering a todo plan and remediation guidance for secure releases.

How do I run a comprehensive security audit on recent code changes?

Run a comprehensive security audit on recent code changes by invoking a scoped review mode. This evaluates data processing paths and file handling for security risks, generating a mapped attack surface and structured findings with severity ratings.

Can I scope a vulnerability check to specific data processing paths and file handling?

Yes, you can scope vulnerability checks to specific data processing paths and file handling modules. The review supports default, scoped, and comprehensive audit modes to identify security risks and provide targeted remediation guidance.

Does automated security review cover secrets management and data exposure?

Automated security review covers secrets management and data exposure by identifying vulnerabilities in code handling sensitive information. It applies focused analysis to authentication modules and API endpoints, returning severity ratings and actionable remediation steps.

What is the best way to generate remediation guidance for input validation vulnerabilities?

The best way to generate remediation guidance for input validation vulnerabilities is through automated security code reviews. This process identifies security risks across data processing paths and provides structured findings with severity ratings to plan secure releases.