skills.rest
vikisingh23
vikisingh23COMMUNITY
Explore all skills by this author →
GitHub

security-review

Scan codebases for security vulnerabilities and generate prioritized remediation reports.

4|Updated Apr 28, 2026
Search Tags:#security#vulnerability#xss#secrets#static-analysis#sql-injection#code-review
One-click install
npx skills add https://github.com/vikisingh23/neuraforge-ai --skill security-review-vikisingh23
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/vikisingh23/neuraforge-ai/tree/main/skills/security-review
Command: npx skills add https://github.com/vikisingh23/neuraforge-ai --skill security-review-vikisingh23

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Scan code for security vulnerabilities, including SQL injection, XSS, hardcoded secrets, weak crypto, and PII exposure.

Core Features & Use Cases

  • Detect SQL injection and XSS in source code and templates.
  • Find hardcoded secrets, API keys, passwords, and tokens to prevent credential leakage.
  • Identify weak crypto, missing auth, CSRF, and rate-limiting gaps; provide remediation guidance.

For full instructions, read agents/security-review.md.

Quick Start

Run a security review on the repository to identify vulnerabilities and generate a prioritized remediation report.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my codebase for security vulnerabilities like SQL injection and XSS?▼

To scan code for security vulnerabilities, run a static analysis review that detects SQL injection, XSS, hardcoded secrets, and weak crypto across your source code and templates, generating a prioritized remediation report.

What is the best way to find hardcoded secrets and API keys in my source code?▼

The best way to find hardcoded secrets is to run a security scan that identifies exposed API keys, passwords, and tokens within your codebase to prevent credential leakage and provide clear remediation guidance.

Does static analysis for weak crypto and missing auth work across different programming languages?▼

Static analysis for weak crypto and missing auth works across languages, scaling from single repositories to multi-repo architectures to identify CSRF, rate-limiting gaps, and other security flaws with remediation guidance.

Can I get prioritized fixes for detected security flaws in a multi-repo architecture?▼

You can get prioritized fixes for security flaws by running a scalable scan across multi-repo architectures, which reports vulnerabilities with clear, prioritized remediation guidance for your software projects.

What types of security vulnerabilities can a code review detect before deployment?▼

A security code review can detect vulnerabilities including SQL injection, XSS, hardcoded secrets exposure, weak crypto, missing authentication, CSRF, and rate-limiting gaps before they impact production.

Related Skills

Explore More Software Engineering Skills→
TECHKNOWMAD-LABSTECHKNOWMAD-LABS

security-audit

Scan code repositories for vulnerabilities and leaked secrets using static analysis tools.

Official
Advanced
iiammaeiiammae

insecure-defaults

Detect hardcoded secrets and weak defaults in production applications.

Community
Advanced
OWASPOWASP
141

secrets-scan

Detect hardcoded secrets in source code and configuration files.

Official
Intermediate
amano--amano--

burp-suite

Intercept HTTP traffic and test web applications for security vulnerabilities.

Community
Advanced