security-review

Audit codebases for vulnerabilities, secrets, and dependency issues.

1|Updated May 7, 2026
One-click install
npx skills add https://github.com/zchee/json-repair-rs --skill security-review-zchee
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/zchee/json-repair-rs/tree/main/.codex/skills/security-review
Command: npx skills add https://github.com/zchee/json-repair-rs --skill security-review-zchee

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps identify security vulnerabilities, misconfigurations, and secret leaks in codebases, preventing potential exploits and data breaches.

Core Features & Use Cases

  • Security Assessment: Performs comprehensive OWASP Top 10 vulnerability scans, secret detection, and input validation checks.
  • Dependency Analysis: Checks for outdated or vulnerable dependencies with known CVEs.
  • Secure Coding Guidance: Offers detailed remediation advice for identified issues.
  • Use Case: Dev teams can run this skill before deployment to catch security issues early and ensure compliance with best practices.

Quick Start

Use the security review skill to scan the latest version of your codebase for vulnerabilities and secrets.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run an OWASP Top 10 vulnerability scan on my codebase?

A security audit scans your codebase to identify vulnerabilities by evaluating secrets, dependencies, and OWASP compliance. It targets APIs and authentication flows to prevent potential exploits and data breaches.

How do I check my code dependencies for known CVEs?

You can check dependencies for known CVEs by running a security audit that analyzes your project's libraries. This dependency analysis identifies outdated or vulnerable packages, providing detailed remediation advice to resolve them.

What is the best way to detect leaked secrets in source code?

Detecting leaked secrets requires scanning the codebase for sensitive data exposure. This security audit evaluates secrets, input validation, and data handling procedures to prevent potential data breaches.

Does this security audit check API authentication flows?

Yes, this security audit specifically evaluates API authentication flows and data handling procedures. It reviews input validation and implements OWASP guidelines to secure your APIs against common vulnerabilities.

When should I run a codebase security review before deployment?

Run a security review before deployment to catch security issues early and ensure compliance. This prevents potential exploits and data breaches by identifying vulnerabilities, misconfigurations, and secret leaks in the codebase.