security-review

Audit application code against OWASP Top 10 security vulnerabilities.

Updated Jul 8, 2026
One-click install
npx skills add https://github.com/ZESCODE/Zes-Orchestration-System --skill security-review-zescode
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/ZESCODE/Zes-Orchestration-System/tree/main/.agents/skills/security-review
Command: npx skills add https://github.com/ZESCODE/Zes-Orchestration-System --skill security-review-zescode

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill addresses the critical need for proactive security by identifying vulnerabilities and enforcing industry-standard protection patterns during the development lifecycle.

Core Features & Use Cases

  • Comprehensive Security Audits: Validates code against OWASP Top 10 risks including SQL injection, XSS, and CSRF.
  • Secrets & Auth Management: Ensures sensitive credentials are never hardcoded and that authentication flows follow secure practices.
  • Use Case: When building a new user authentication module, activate this skill to verify that your JWT handling, input validation, and database queries are resistant to common attack vectors.

Quick Start

Use the security-review skill to audit the current codebase for potential vulnerabilities and provide a remediation checklist.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit my application code for OWASP Top 10 vulnerabilities?

Auditing application code for OWASP Top 10 vulnerabilities involves a systematic checklist process that validates database interactions, authentication, and input handling against SQL injection and XSS. This yields a targeted remediation list to harden code.

What is the best way to check for hardcoded secrets and insecure authentication in my codebase?

Checking for hardcoded secrets and insecure authentication requires validating sensitive credential handling and verifying authentication flows follow secure practices. This ensures credentials remain protected and access controls stay robust.

How does checklist-based security auditing work for sensitive data management?

Checklist-based security auditing for sensitive data works by systematically evaluating database interactions and input validation patterns against established standards. This enforces robust protection protocols throughout the development lifecycle.

Can I use a vulnerability audit to verify JWT handling and input validation patterns?

Yes, you can use a vulnerability audit to verify JWT handling and input validation patterns. It systematically checks authentication modules to ensure resistance against common attack vectors and validates secure data processing.

When do I need to run a security review during the development lifecycle?

You need to run a security review during the development lifecycle when building new authentication modules or handling sensitive data. It proactively identifies vulnerabilities and enforces industry-standard protection patterns before deployment.