skills.rest
Advance-Technologies-Foundation
Advance-Technologies-FoundationOFFICIAL
Explore all skills by this author →
GitHub

security-reviewer

Identify security vulnerabilities in source code changes using Context7 and vulnerability databases.

55|38|Updated Sep 26, 2018
Search Tags:#code review#security#CI/CD#secure coding#vulnerability scanning
One-click install
npx skills add https://github.com/Advance-Technologies-Foundation/clio --skill security-reviewer-advance-technologies-foundation
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-reviewer
Source: https://github.com/Advance-Technologies-Foundation/clio/tree/main/.codex/skills/security-reviewer
Command: npx skills add https://github.com/Advance-Technologies-Foundation/clio --skill security-reviewer-advance-technologies-foundation

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill identifies security vulnerabilities in code changes to ensure secure coding practices are maintained.

Core Features & Use Cases

  • Vulnerability Detection: Automatically scan for SQL injection, XSS, CSRF, and other security risks.
  • Secure Coding Verification: Validate input validation, session management, and cryptography.
  • Use Case: Use it in a CI/CD pipeline to continuously check for security issues in code changes before they are merged.

Quick Start

Run the security-reviewer skill on your recent code changes to ensure security compliance.

Frequently Asked Questions about security-reviewer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan for security vulnerabilities in code changes before merging?▼

To scan for security vulnerabilities in code changes, run a security reviewer on your recent commits to detect SQL injection, XSS, and CSRF risks before they are merged into the main branch.

Can I integrate vulnerability scanning into a CI/CD pipeline for early detection?▼

Yes, you can integrate vulnerability scanning into a CI/CD pipeline to continuously check for security issues in code changes, enabling early detection and mitigation of flaws during the code review process.

What types of secure coding vulnerabilities can be automatically detected in source code?▼

Automatically detectable secure coding vulnerabilities include SQL injection, XSS, CSRF, and flaws in input validation, session management, and cryptography within your source code changes.

Do I need access to vulnerability databases to identify security risks in my codebase?▼

Yes, identifying security risks in your codebase requires access to vulnerability databases and Context7, alongside source code access, to accurately compare changes against known security flaws.

What is the best way to verify secure coding practices during a code review?▼

The best way to verify secure coding practices during a code review is to automatically validate input validation, session management, and cryptography to ensure security compliance and mitigate risks.

Related Skills

Explore More Software Engineering Skills→
calvingitcalvingit
2

context7-cli

Automate library documentation retrieval, skill management, and MCP setup via ctx7 CLI.

Community
Intermediate
poitchpoitch

merge-pr

Squash-merge pull requests, delete remote and local branches, and pull main.

Community
Intermediate
omeraltnomeraltn

agency-api-tester

Validate RESTful API functionality, security, and performance in CI/CD pipelines.

Community
Advanced
bugrabilgebugrabilge
10

vulnerability-scanner

Detect security vulnerabilities in code, running apps, and dependencies.

Community
Advanced