security-reviewer

Analyzes codebases for vulnerabilities, misconfigurations, and secret leaks.

17|3|Updated Mar 18, 2026

Search Tags:#static analysis #code review #security #vulnerability #audit #penetration testing #compliance

Ready to run

npx skills add https://github.com/codeApe-7/ai-agent-workflowGroup --skill security-reviewer-codeape-7

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-reviewer
Source: https://github.com/codeApe-7/ai-agent-workflowGroup/tree/main/skills/quality/security-reviewer
Command: npx skills add https://github.com/codeApe-7/ai-agent-workflowGroup --skill security-reviewer-codeape-7

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) and scripts (resource) components.

What problem does it solve?

This Skill helps security analysts and developers identify vulnerabilities, conduct security reviews, and generate comprehensive audit reports to ensure system integrity.

Core Features & Use Cases

Vulnerability Detection: Scan codebases for security flaws such as SQL injection, XSS, and secrets leaks.
Security Auditing: Assist in manual review processes by providing standardized guidelines and reference material.
Use Case: When preparing a security assessment, invoke this Skill to analyze code for vulnerabilities, review best practices, and compile findings into reports.

Quick Start

Use the security-reviewer skill to analyze your project directory for common security issues and generate an audit report.

Frequently Asked Questions about security-reviewer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I scan a codebase for security vulnerabilities and secrets leaks?▼

To scan a codebase for security vulnerabilities and secrets leaks, invoke this skill to detect patterns like SQL injection, XSS, and misconfigurations. It performs comprehensive code review and generates actionable remediation findings.

What is static analysis for code security and when do I need it?▼

Static analysis for code security identifies structural flaws and vulnerabilities without executing the program. You need it during security audits and compliance checks to ensure system integrity and review best practices.

How do I prepare a security audit and compliance check for my software project?▼

Prepare a security audit and compliance check by analyzing your project directory for common security issues. This skill reviews code, infrastructure, and best practices to compile findings into comprehensive audit reports.

Does penetration testing require manual review or can it be automated?▼

Penetration testing typically requires manual review, but this skill assists by providing standardized guidelines and reference material. It automates scanning for known patterns while supporting manual security auditing processes.

What's the best way to review infrastructure for misconfigurations?▼

The best way to review infrastructure for misconfigurations is performing a comprehensive scan covering code, infrastructure, and best practices. This skill detects known patterns and provides actionable remediation steps suited for security audits.

Why does my security review not catch certain vulnerability patterns?▼

A security review may miss certain vulnerability patterns if they require complex runtime context. This skill focuses on static detection of known patterns, misconfigurations, and secrets leaks, complementing but not replacing manual penetration testing.