skills.rest
Jeffallan
JeffallanCOMMUNITY
Explore all skills by this author →
Website𝕏@j3ffallanGitHub

security-reviewer

Identify security vulnerabilities in code, configuration, and infrastructure during audits.

10.9k|1.0k|Updated Oct 20, 2025
Search Tags:#security#vulnerability#audit#penetration testing#compliance#cloud security#SAST
One-click install
npx skills add https://github.com/Jeffallan/claude-skills --skill security-reviewer
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-reviewer
Source: https://github.com/Jeffallan/claude-skills/tree/main/skills/security-reviewer
Command: npx skills add https://github.com/Jeffallan/claude-skills --skill security-reviewer

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps teams perform thorough security assessments by combining automated SAST scans, vulnerability pattern analysis, and controlled manual reviews, delivering structured reports.

Core Features & Use Cases

  • Automated Scan: Run SAST and dependency tooling to identify common issues.
  • Manual Review: Perform targeted reviews of authentication, input handling, and cryptography.
  • Active Testing Guidance: Validate findings with authorized testing and safe exploitation when needed.
  • Reporting: Produce executive summaries and detailed remediation guidance.

Quick Start

Run a security review on the codebase and generate a comprehensive report with actionable remediation.

Frequently Asked Questions about security-reviewer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I identify security vulnerabilities in my codebase during development?▼

Security vulnerability identification combines automated SAST scanning, dependency analysis, and manual code review targeting authentication, input handling, and cryptography. This approach delivers precise file and line locations, severity ranking, and remediation guidance for faster patching cycles.

Can I use automated security scanning in my CI/CD pipeline?▼

Yes. SAST and dependency tools integrate into DevSecOps pipelines to catch vulnerabilities early. The Skill generates structured output with severity-based prioritization and remediation steps suitable for automated gating and executive reporting.

What's the best way to audit cloud and container security configurations?▼

Cloud and container security reviews combine infrastructure configuration analysis with vulnerability pattern matching. The Skill validates findings through authorized testing and produces detailed reports with compliance context and remediation paths.

How do I prepare code and infrastructure for a security audit?▼

Prepare by gathering codebase snapshots, dependency inventories, and infrastructure configurations. The Skill then performs comprehensive SAST scanning, pattern analysis, and controlled manual reviews to identify and prioritize vulnerabilities by severity.

Does automated security scanning catch all vulnerability types?▼

SAST automation detects common coding flaws and dependency issues efficiently. Manual review of authentication, input handling, and cryptography logic complements automation to catch context-dependent and design-level vulnerabilities that patterns alone may miss.

Related Skills

Explore More Software Engineering Skills→
UnicornUnicorn

vulnerability-scan-agent

Scan code, dependencies, and configurations for known security vulnerabilities.

Official
Advanced
Dhruvipatel0514Dhruvipatel0514
1

reporter

Consolidates vulnerability findings, threat intel, and audit results into a professional security report.

Community
Advanced
wojonswojons
4

security-scan

Scan web applications, containers, and infrastructure for vulnerabilities with compliance mapping.

Community
Advanced
CENKSSSCENKSSS

pentest-validation

Validate SAST and DAST vulnerability exploitability through a 4-phase pipeline.

Community
Advanced