security-review-v2

Automating OWASP Top 10 security reviews for pull requests involves analyzing PR changes for high-impact files and misconfigurations. This skill reads PR metadata and project architecture context to generate actionable findings with attack vectors and remediation guidance.

Framework-aware code analysis for security vulnerabilities is supported by incorporating standards from architecture and configuration files. This ensures the OWASP Top 10 analysis respects your specific tech stack and framework guarantees when reviewing PR changes.

Automated PR security review works across different repositories and frameworks by applying a context-aware OWASP Top 10 analysis. It tailors risk scoring based on the specific project architecture and changed files rather than relying on generic rules.

Integrating threat modeling into CI/CD PR review workflows is best achieved by automating structured security inspections. This skill evaluates changed files for potential risk areas and posts actionable findings directly as PR review comments or approvals.

Actionable remediation guidance for security issues found during code analysis is generated alongside attack vectors and severity ratings. The skill outputs these findings directly to your pull request, providing clear steps to resolve identified vulnerabilities.