security-review

Review code against the OWASP Top 10 checklist for vulnerabilities.

1|1|Updated Dec 25, 2025
One-click install
npx skills add https://github.com/uukuguy/claude-agent-framework --skill security-review-uukuguy
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/uukuguy/claude-agent-framework/tree/main/examples/production/02_pr_code_review/.claude/skills/security-review
Command: npx skills add https://github.com/uukuguy/claude-agent-framework --skill security-review-uukuguy

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps identify and mitigate security vulnerabilities in code changes, ensuring that code deployed to production is robust against common attack vectors.

Core Features & Use Cases

  • OWASP Top 10 Checklist: Provides a structured checklist covering major security risks like Injection, Broken Authentication, and XSS.
  • Detection Guidance: Offers specific indicators and code patterns to look for when reviewing for each vulnerability type.
  • Secure Coding Patterns: Recommends best practices for input validation, output encoding, and cryptography.
  • Use Case: Before merging a pull request, use this Skill to perform a comprehensive security audit, flagging potential risks and suggesting remediation steps.

Quick Start

Run a security review on the provided code changes using the OWASP Top 10 checklist.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a security code review using the OWASP Top 10 checklist?

Run a security code review by applying the OWASP Top 10 checklist to your code changes to identify vulnerabilities like injection and broken authentication. It analyzes code patterns and provides structured findings with remediation recommendations.

What secure coding practices should I look for when reviewing code changes?

Secure coding practices to look for include proper input validation, output encoding, and cryptography. The review applies these secure coding patterns alongside the OWASP Top 10 to flag risks and suggest specific remediation steps before production deployment.

Can I use this to detect broken authentication and XSS vulnerabilities in my pull request?

Yes, you can detect broken authentication and XSS vulnerabilities in your pull request. The review applies detection guidance and specific code pattern indicators to identify these OWASP Top 10 risks, offering structured findings and recommendations for remediation.

Does this security review identify data exposure and injection vulnerabilities?

This security review identifies data exposure and injection vulnerabilities. It performs a comprehensive audit using the OWASP Top 10 checklist and secure coding best practices, flagging potential risks and suggesting remediation steps to ensure production code is robust.

What is the best way to automate DevSecOps vulnerability detection before merging code?

The best way to automate DevSecOps vulnerability detection before merging is to run a structured security audit on code changes. This process flags potential risks across major OWASP categories and generates structured recommendations for remediation.

When do I need a structured security audit for my code changes?

You need a structured security audit for your code changes before deploying to production. This ensures your code is robust against common attack vectors by identifying and mitigating security vulnerabilities using the OWASP Top 10 checklist.