security-review

Detect and mitigate OWASP Top 10 web application vulnerabilities across code, APIs, and deployments.

Updated Feb 19, 2026
One-click install
npx skills add https://github.com/walker-hzx/AI-Assistant --skill security-review-walker-hzx
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/walker-hzx/AI-Assistant/tree/main/skills/security-review
Command: npx skills add https://github.com/walker-hzx/AI-Assistant --skill security-review-walker-hzx

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill helps security teams identify and fix Web application vulnerabilities before they reach production environments, focusing on OWASP Top 10, secret leakage, input validation, and secure authentication.

Core Features & Use Cases

  • Vulnerability detection across frontend and backend codebases, APIs, and deployment pipelines.
  • Secret/key detection and rotation guidance.
  • Input validation and access control reviews to prevent common attacks.
  • Dependency security auditing and adherence to secure coding practices.
  • Use Case: Before releasing a new feature, run a security review to surface potential risks and remediation steps.

Quick Start

Initiate a security review on your project by running the guided workflow and applying the vulnerability-checklist to remediate issues.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I find web application vulnerabilities before deploying new features?

To find web application vulnerabilities before deployment, run a security review that enforces OWASP Top 10 checks, input validation, and authentication reviews across your codebase, APIs, and infrastructure to surface risks and remediation steps.

What is the best way to detect secret leakage in frontend and backend code?

Detecting secret leakage requires scanning your frontend and backend codebases to identify exposed keys and secrets, providing guidance on proper rotation and secure authentication practices to mitigate access control risks.

How do I perform a dependency security audit for my web application?

Perform a dependency security audit by scanning your project dependencies against known vulnerabilities, ensuring adherence to secure coding practices and guiding necessary dependency updates before production release.

Can I use this security review for both development and pre-production environments?

Yes, you can apply this security review during development, testing, and pre-production to guide frontend and backend code changes, dependency updates, and infrastructure security mitigations across your deployment pipelines.

Does this security check cover OWASP Top 10 and input validation for APIs?

Yes, the security check covers OWASP Top 10 vulnerabilities and input validation for APIs, enforcing secure coding guidelines and authentication checks across your APIs and deployment pipelines.

Why should I run an access control review on my web app APIs?

Running an access control review on your web app APIs prevents common attacks by validating input and enforcing proper authentication and authorization checks, ensuring vulnerabilities are mitigated before reaching production.