Apply a security review checklist to detect OWASP Top 10 risks and secret exposure.
npx skills add https://github.com/VeinPal/VeinPals --skill security-review-veinpal
Please help me install this Agent Skill. Skill: security-review Source: https://github.com/VeinPal/VeinPals/tree/main/.github/skills/security-review Command: npx skills add https://github.com/VeinPal/VeinPals --skill security-review-veinpal
Security reviews identify and remediate vulnerabilities across the Veinpal monorepo, helping teams adhere to best practices and reduce risk.
Run a security review against the repository using the documented checklist to identify critical issues and recommended fixes.
High-intent search queries and answers about installing and using this skill.
Run a security review using a structured checklist to detect OWASP Top 10 risks, secret exposure, and misconfigurations. It identifies vulnerabilities and provides recommended fixes to enforce secure software practices across your repository.
Enforce secure defaults and input validation in a Next.js CI workflow by integrating checklist-based reviews into PR checks. This automatically flags insecure patterns and provides guidance for configuring rate limiting and robust error handling.
The best way to check for secret exposure and misconfigurations is applying a security review checklist during deployment configurations. It satisfies mandatory secret management requirements and detects potential vulnerabilities before release.
Yes, the security review works with Next.js hardening and CI CD pipelines. It provides specific patterns for configuring security headers and integrates seamlessly into code changes and deployment configurations to enforce secure practices.
Yes, you can use this security review to automatically flag insecure patterns in PR checks. It applies a structured checklist to enforce secure defaults, validate inputs, and ensure proper secret handling during code changes.
Limitations include relying on documented checklist patterns to manually enforce security headers and rate limiting across a monorepo. It provides guidance for configurations but requires consistent application during code changes and deployments.
ozbyIdentify and document security vulnerabilities and misconfigurations across APIs, services, and CI/CD pipelines.
CwuztoEnforce HTTPS, security headers, and input validation for web applications.
tbartel74Automate OWASP Top 10 checks, secret detection, and dependency audits for Vigil Guard services.
rnavarychAutomate security testing with Snyk, Semgrep, Gitleaks, and OWASP ZAP in CI/CD pipelines.
