security-reviewer

To scan a codebase for security vulnerabilities and secrets leaks, invoke this skill to detect patterns like SQL injection, XSS, and misconfigurations. It performs comprehensive code review and generates actionable remediation findings.

Static analysis for code security identifies structural flaws and vulnerabilities without executing the program. You need it during security audits and compliance checks to ensure system integrity and review best practices.

Prepare a security audit and compliance check by analyzing your project directory for common security issues. This skill reviews code, infrastructure, and best practices to compile findings into comprehensive audit reports.

Penetration testing typically requires manual review, but this skill assists by providing standardized guidelines and reference material. It automates scanning for known patterns while supporting manual security auditing processes.

The best way to review infrastructure for misconfigurations is performing a comprehensive scan covering code, infrastructure, and best practices. This skill detects known patterns and provides actionable remediation steps suited for security audits.

A security review may miss certain vulnerability patterns if they require complex runtime context. This skill focuses on static detection of known patterns, misconfigurations, and secrets leaks, complementing but not replacing manual penetration testing.