security-reviewer

Identify security vulnerabilities in source code changes using Context7 and vulnerability databases.

55|38|Updated Sep 26, 2018

Search Tags:#code review #security #CI/CD #secure coding #vulnerability scanning

Ready to run

npx skills add https://github.com/Advance-Technologies-Foundation/clio --skill security-reviewer-advance-technologies-foundation

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-reviewer
Source: https://github.com/Advance-Technologies-Foundation/clio/tree/main/.codex/skills/security-reviewer
Command: npx skills add https://github.com/Advance-Technologies-Foundation/clio --skill security-reviewer-advance-technologies-foundation

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill identifies security vulnerabilities in code changes to ensure secure coding practices are maintained.

Core Features & Use Cases

Vulnerability Detection: Automatically scan for SQL injection, XSS, CSRF, and other security risks.
Secure Coding Verification: Validate input validation, session management, and cryptography.
Use Case: Use it in a CI/CD pipeline to continuously check for security issues in code changes before they are merged.

Quick Start

Run the security-reviewer skill on your recent code changes to ensure security compliance.

Frequently Asked Questions about security-reviewer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I scan for security vulnerabilities in code changes before merging?▼

To scan for security vulnerabilities in code changes, run a security reviewer on your recent commits to detect SQL injection, XSS, and CSRF risks before they are merged into the main branch.

Can I integrate vulnerability scanning into a CI/CD pipeline for early detection?▼

Yes, you can integrate vulnerability scanning into a CI/CD pipeline to continuously check for security issues in code changes, enabling early detection and mitigation of flaws during the code review process.

What types of secure coding vulnerabilities can be automatically detected in source code?▼

Automatically detectable secure coding vulnerabilities include SQL injection, XSS, CSRF, and flaws in input validation, session management, and cryptography within your source code changes.

Do I need access to vulnerability databases to identify security risks in my codebase?▼

Yes, identifying security risks in your codebase requires access to vulnerability databases and Context7, alongside source code access, to accurately compare changes against known security flaws.

What is the best way to verify secure coding practices during a code review?▼

The best way to verify secure coding practices during a code review is to automatically validate input validation, session management, and cryptography to ensure security compliance and mitigate risks.