skills.rest
YeaChan05
YeaChan05COMMUNITY
Explore all skills by this author →
GitHub

security-review

Identify security vulnerabilities and generate a detailed review report with remediation guidance.

Updated Jan 4, 2026
Search Tags:#security#vulnerability#owasp#risk-assessment#code-review#dependency-check
One-click install
npx skills add https://github.com/YeaChan05/Remittance --skill security-review-yeachan05
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/YeaChan05/Remittance/tree/main/.codex/skills/security-review
Command: npx skills add https://github.com/YeaChan05/Remittance --skill security-review-yeachan05

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill helps teams identify and remediate security issues in codebases, reducing the risk of data exposure and failed deployments.

Core Features & Use Cases

  • OWASP Top 10 coverage including A01-A10 checks
  • Secrets detection and credential hygiene
  • Input validation and secure coding guidance
  • Dependency vulnerability and version risk analysis
  • Actionable remediation guidance with file:line references

Quick Start

Run a comprehensive security review on your codebase using the security-review agent to generate a formal report with actionable remediations.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a security code audit for OWASP Top 10 vulnerabilities?▼

A security code audit identifies vulnerabilities like the OWASP Top 10, hardcoded secrets, and dependency risks in your codebase. It produces a detailed report containing evidence, CVE references, severity assessments, and actionable remediation steps.

How do I detect hardcoded secrets and credential hygiene issues in my codebase?▼

Detecting hardcoded secrets during a security review involves scanning source files for exposed credentials and credential hygiene issues. The review flags these risks in a formal report with specific file:line references and remediation suggestions.

Can I check for dependency vulnerabilities and version risks before production deployment?▼

Yes, you can check dependency vulnerabilities and version risks before production deployment. The security review analyzes dependencies for known CVEs and version risks, including them in the final report with appropriate severity assessments.

Does the security review provide specific remediation guidance for input validation issues?▼

Yes, the security review provides specific remediation guidance for input validation issues. It evaluates secure coding practices and outputs actionable remediation suggestions with precise file:line references to help developers fix identified vulnerabilities.

What is the best way to assess authentication and authorization logic risks during feature changes?▼

The best way to assess authentication and authorization logic risks during feature changes is to run a comprehensive security code audit. It specifically targets authentication logic updates and API additions, generating a detailed report with prioritized remediation suggestions.

Related Skills

Explore More Software Engineering Skills→
chenchunrunchenchunrun
1

asset-monitor

Discover and monitor attack-surface assets with MCP-based risk detection.

Community
Advanced
Kling0012Kling0012
1

V3 Security Overhaul

Secure claude-flow v3 through threat modeling, CVE remediation, and security testing.

Community
Advanced
stark-ai-destark-ai-de
4

security-baseline-review

Review public repositories for security hygiene using git and the GitHub API.

Official
Intermediate
praburajasekaranpraburajasekaran

security-sentinel

Audit codebases for OWASP Top 10 vulnerabilities and hardcoded secrets.

Community
Advanced