security-review

Audit codebases for vulnerabilities and misconfigurations using OWASP Top 10 checks.

Updated Apr 23, 2026

Search Tags:#security #code-review #secret-detection #dependency-security #owasp-top-10 #vulnerability-audit

Ready to run

npx skills add https://github.com/wmasfoe/notch-pet --skill security-review-wmasfoe

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/wmasfoe/notch-pet/tree/main/.codex/skills/security-review
Command: npx skills add https://github.com/wmasfoe/notch-pet --skill security-review-wmasfoe

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill enables teams to perform comprehensive security reviews of codebases to identify vulnerabilities, misconfigurations, and security gaps.

Core Features & Use Cases

OWASP Top 10 assessment: Identify critical vulnerabilities across authentication, authorization, input validation, and data handling.
Secrets & Dependency Security: Detect hardcoded secrets and unsafe dependencies, and provide remediation guidance.
Audit Reporting & Guidance: Produce actionable remediation steps and high-quality security posture reports for developers and leadership.

Quick Start

Run a security review on your codebase to uncover vulnerabilities and compliance gaps.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I run a security audit on my codebase to identify vulnerabilities?▼

Run a security audit on your codebase to identify vulnerabilities and misconfigurations by applying OWASP Top 10 checks, secret detection, and dependency security assessments. It generates structured remediation guidance and risk reporting.

What does OWASP Top 10 code review cover for authentication and authorization?▼

OWASP Top 10 code review covers authentication, authorization, input validation, and data handling to identify critical vulnerabilities across your codebase. It provides actionable remediation steps to fix discovered security gaps.

When do I need to perform a dependency security assessment?▼

Perform a dependency security assessment after dependency updates and before production deployment to detect unsafe third-party components. This ensures your new code and updated libraries do not introduce hidden vulnerabilities.

Can I detect hardcoded secrets in my source code automatically?▼

You can detect hardcoded secrets in your source code automatically during a comprehensive security audit. The review scans your codebase to uncover sensitive credentials and provides structured remediation guidance to remove them.

What's the best way to generate security posture reports for leadership?▼

Generate security posture reports for leadership by running a comprehensive vulnerability audit on your codebase. The process produces high-quality risk reporting with actionable remediation steps tailored for both developers and management.

Does security code review work for input validation and data handling checks?▼

Security code review works effectively for input validation and data handling checks by applying OWASP Top 10 vulnerability assessments. It evaluates your new code to ensure misconfigurations and security gaps are identified before deployment.