skills.rest
zhaozengqing4364-bit
zhaozengqing4364-bitCOMMUNITY
Explore all skills by this author →
GitHub

security-review

Scan codebases for vulnerabilities, secrets, and dependency risks.

Updated Jan 16, 2026
Search Tags:#static analysis#code review#security#vulnerability#dependency scan#automated audit
One-click install
npx skills add https://github.com/zhaozengqing4364-bit/sales-training-qoder --skill security-review-zhaozengqing4364-bit
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/zhaozengqing4364-bit/sales-training-qoder/tree/main/.codex/skills/security-review
Command: npx skills add https://github.com/zhaozengqing4364-bit/sales-training-qoder --skill security-review-zhaozengqing4364-bit

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill enables developers to perform thorough security reviews of their codebases, identifying vulnerabilities and compliance issues.

Core Features & Use Cases

  • Security Vulnerability Detection: Conducts OWASP Top 10 scans, detects hardcoded secrets, and reviews input validation.
  • Code Analysis: Checks for insecure authentication and authorization implementations.
  • Dependency Scanning: Runs vulnerability scans on project dependencies via npm audit.
  • Use Case: For a deployment pipeline, automatically analyze the code for security flaws before release to ensure compliance and safety.

Quick Start

Use the security-review skill to analyze your codebase and generate a security assessment report.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate a code security review for my project before deployment?▼

To automate a code security review before deployment, you can use this Skill to scan your codebase for hardcoded secrets, input validation issues, and dependency vulnerabilities, generating a comprehensive security assessment report.

What is an automated security audit and how does it check for vulnerabilities?▼

An automated security audit systematically examines source code to identify risks. This Skill performs the audit by checking for OWASP Top 10 vulnerabilities, insecure authentication implementations, and running dependency scans.

Can I use static analysis to detect hardcoded secrets in my codebase?▼

Yes, you can use static analysis to detect hardcoded secrets. The security review process scans the codebase to identify exposed credentials and validates authentication implementations to improve your overall security posture.

Does dependency scanning work with npm audit for vulnerability checks?▼

Yes, dependency scanning works with npm audit. The automated security review runs vulnerability scans directly on your project dependencies to detect known risks and ensure compliance before release.

What are the limitations of automated security vulnerability detection?▼

The limitations of automated security vulnerability detection include focusing primarily on static analysis patterns like hardcoded secrets, input validation, and dependency risks, meaning it may not catch complex runtime or logical authorization flaws.

Related Skills

Explore More Software Engineering Skills→
microsoftmicrosoft
1.4k

azure-app-onboard-prereq

Evaluate source code repositories for Azure deployment readiness.

Official
Advanced
adnanmuelleradnanmueller
2

security-audit

Validate security controls and generate a deployment readiness report.

Community
Advanced
PriyanshKuniyalPriyanshKuniyal

sast-configuration

Configures and manages SAST tools for automated vulnerability detection in CI/CD pipelines.

Community
Advanced
AnsteorraAnsteorra
6

security-audit

Perform static and dynamic security audits on the KMP application.

Official
Advanced