skills.rest
YunosukeYoshino
YunosukeYoshinoCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

security-review

Detect secret leaks, PII exposure, and auth risks in codebases and CI workflows.

Updated Apr 3, 2026
Search Tags:#security#auditing#secrets#risk-management#code-review#auth#pii
One-click install
npx skills add https://github.com/YunosukeYoshino/harness --skill security-review-yunosukeyoshino
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/YunosukeYoshino/harness/tree/main/.claude/skills/security-review
Command: npx skills add https://github.com/YunosukeYoshino/harness --skill security-review-yunosukeyoshino

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Manual code reviews often miss secret leaks, PII exposure, and risky auth changes, leading to security incidents and compliance gaps. This Skill provides automated detection and guidance to identify and remediate these issues before they reach production.

Core Features & Use Cases

  • Detect secret leaks in source control, config files, and build artifacts.
  • Flag PII exposure in logs, telemetry, and error messages.
  • Identify auth bypass risks and unsafe dynamic execution in CI pipelines.
  • Generate audit-ready reports and remediation steps for developers and security teams.

Quick Start

Run the security-review skill on your repository to start an automated risk scan.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect secret leaks in source control and config files?▼

Automated secret scanning identifies leaked credentials in source control, config files, and build artifacts to prevent security incidents and compliance gaps before production deployment.

What is the best way to prevent PII exposure in application logs?▼

PII exposure prevention flags sensitive data in logs, telemetry, and error messages. It provides automated detection and generates audit-ready reports with remediation steps to ensure compliance.

Can I check for auth bypass risks and unsafe dynamic execution in CI pipelines?▼

Yes, security reviews can identify auth bypass risks and unsafe dynamic execution across CI workflows and deployment configurations to enforce safe execution guardrails.

How do I generate audit-ready security reports for developers and security teams?▼

Automated risk scanning generates audit-ready reports containing detected secret leaks, PII exposure, and auth regressions alongside actionable remediation steps for developers and security teams.

Does automated code review work for pull requests and deployment configurations?▼

Automated security checks apply directly to code reviews, pull requests, deployment configurations, and runtime logs across repositories and environments to mitigate risks.

Related Skills

Explore More Software Engineering Skills→
calcomcalcom
47.4k

web-design-guidelines

Evaluate HTML, CSS, and JS code against Web Interface Guidelines.

Official
Intermediate
LerianStudioLerianStudio
205

ops-security-audit

Automate infrastructure security audits with phased scanning and compliance mapping.

Official
Advanced
TECHKNOWMAD-LABSTECHKNOWMAD-LABS

security-audit

Scan code repositories for vulnerabilities and leaked secrets using static analysis tools.

Official
Advanced
summarybotngsummarybotng
2

QE Security Compliance

Automate security auditing, vulnerability scanning, and compliance validation against OWASP, SOC2, and GDPR.

Official
Advanced