security-reviewer

To automate a SAST scan and secrets detection, provide your project repository and security scope to trigger an automated security review. The Skill scans codebases to surface vulnerabilities early and identify hidden secrets within your DevSecOps workflows.

You can run a security review on CI/CD pipelines and cloud configurations by providing the relevant configuration contexts as input. The Skill applies infrastructure hardening checks and access control reviews to identify misconfigurations in your DevSecOps pipelines.

The best way to generate a security report with severity ratings is to use an automated security audit on your repository files. The Skill outputs a structured security report detailing risk ratings and actionable remediation guidance for stakeholders.

Yes, this security review process works for both infrastructure hardening and dependency checks. It evaluates cloud configurations and scans project dependencies to surface vulnerabilities early within your existing DevSecOps workflows.

For an automated security audit, you need to provide access to your repository files and configuration contexts. This access allows the Skill to perform comprehensive SAST scanning, secrets detection, and infrastructure reviews.

Yes, you can use this for access control review and penetration testing contexts within DevSecOps. The Skill automates security audits by identifying vulnerabilities and misconfigurations across code, configuration, and infrastructure layers.