skills.rest
Design-System-ET
Design-System-ETOFFICIAL
Explore all skills by this author →
GitHub

security-reviewer

Identify security vulnerabilities and generate structured audit reports with severity ratings.

Updated Jun 16, 2026
Search Tags:#security#vulnerability#audit#compliance#sast#devsecops
One-click install
npx skills add https://github.com/Design-System-ET/genexus-dev-opencode --skill security-reviewer-design-system-et
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-reviewer
Source: https://github.com/Design-System-ET/genexus-dev-opencode/tree/main/skills/security-reviewer
Command: npx skills add https://github.com/Design-System-ET/genexus-dev-opencode --skill security-reviewer-design-system-et

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This skill addresses the challenge of identifying security vulnerabilities in codebases and infrastructure, ensuring that security best practices are consistently applied throughout the development lifecycle.

Core Features & Use Cases

  • Vulnerability Identification: Performs automated SAST, dependency, and secrets scanning to detect common security flaws.
  • Audit Reporting: Generates structured, actionable reports with severity ratings and remediation guidance.
  • Use Case: Use this skill to conduct a comprehensive security review of a new repository, identifying hardcoded credentials, outdated dependencies, and insecure coding patterns before deployment.

Quick Start

Invoke the security-reviewer skill to perform a full security audit and generate a vulnerability report for the current project directory.

Frequently Asked Questions about security-reviewer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform an automated security audit on my codebase?▼

Automated security audits identify vulnerabilities using SAST scans, dependency checks, and secrets detection. The security review process generates structured reports with severity ratings and remediation guidance across diverse technology stacks.

What is SAST scanning and when do I need it for DevSecOps compliance?▼

SAST scanning analyzes source code to find security vulnerabilities and insecure coding patterns. It is needed for DevSecOps compliance to detect hardcoded credentials and ensure secure coding practices before deployment.

How do I check my project dependencies for security vulnerabilities?▼

Dependency audits scan project libraries to identify known security vulnerabilities and outdated versions. The review process outputs a structured report with severity ratings and actionable remediation guidance for updated dependencies.

Can I use this security review for infrastructure security reviews and penetration testing?▼

Yes, infrastructure security reviews and penetration testing are supported. The security audit identifies vulnerabilities across diverse technology stacks and generates actionable reports with severity ratings and remediation guidance.

Does the security audit detect hardcoded credentials in my repository?▼

Yes, credential detection is a core feature of the security audit. It scans your repository to identify hardcoded credentials and insecure coding patterns, providing remediation guidance within a structured vulnerability report.

What is the best way to generate a vulnerability report with remediation guidance?▼

The best way to generate a vulnerability report is through an automated security audit. It performs SAST scans and dependency checks, outputting structured reports with severity ratings and specific remediation guidance for detected issues.

Related Skills

Explore More Software Engineering Skills→
UnicornUnicorn

vulnerability-scan-agent

Scan code, dependencies, and configurations for known security vulnerabilities.

Official
Advanced
saschadudkin-sketchsaschadudkin-sketch

security-reviewer

Identify security vulnerabilities in code and infrastructure and generate audit reports with severity ratings.

Community
Advanced
4lerman4lerman

senior-secops

Automate security scans, CVE remediation, and compliance checks against SOC2, PCI-DSS, HIPAA, and GDPR.

Community
Advanced
jayjpatel9717jayjpatel9717

network-pentest-orchestration

Orchestrate network penetration tests with detection-first host discovery and port scanning.

Community
Advanced