skills.rest
dieu-donnee
dieu-donneeCOMMUNITY
Explore all skills by this author →
GitHub

security-reviewer

Identify security vulnerabilities in code and infrastructure with severity-rated audit reports.

Updated Jan 9, 2026
Search Tags:#security#vulnerability#audit#sast#devsecops#penetration-testing#infrastructure-security
One-click install
npx skills add https://github.com/dieu-donnee/luxtrax --skill security-reviewer-dieu-donnee
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-reviewer
Source: https://github.com/dieu-donnee/luxtrax/tree/main/.agent/skills/security-reviewer
Command: npx skills add https://github.com/dieu-donnee/luxtrax --skill security-reviewer-dieu-donnee

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Security teams need a precise, repeatable process to identify vulnerabilities across code and infrastructure and to generate actionable remediation guidance.

Core Features & Use Cases

  • Automated vulnerability identification across code, dependencies, and configurations with structured audit reports.
  • Prioritized remediation guidance including severity ratings and actionable remediation steps.
  • Compliance-oriented checklists and documentation support for security reviews, DevSecOps, and audits.

Quick Start

Run a security review of your repository to produce a vulnerability report and remediation plan.

Frequently Asked Questions about security-reviewer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a SAST scan to identify security vulnerabilities in my code?▼

To perform a SAST scan, the security-reviewer Skill analyzes your source code to identify security vulnerabilities and outputs a structured audit report with severity ratings and actionable remediation steps.

Can I automate a security audit for dependencies and secrets scanning in a DevSecOps pipeline?▼

Yes, you can automate a security audit within DevSecOps pipelines. The Skill identifies vulnerabilities across code, dependencies, and configurations, delivering structured audit reports suitable for continuous integration.

What is the best way to generate a penetration testing report with remediation guidance?▼

The best way to generate a penetration testing report is using the Skill to identify security flaws and produce a standardized audit report that includes severity-rated findings and prioritized remediation guidance.

Does this security review process support cloud infrastructure security reviews and compliance checklists?▼

Yes, the security review process supports cloud infrastructure security reviews. It provides compliance-oriented checklists and documentation to support DevSecOps audits and infrastructure security assessments.

How do I audit my repository for hidden secrets and infrastructure security flaws?▼

To audit your repository for secrets and infrastructure security flaws, run a security review to scan configurations and code, producing a vulnerability report and a structured remediation plan.

What limitations exist when manually reviewing infrastructure security configurations?▼

Manual infrastructure security reviews lack repeatability and precise prioritization. The Skill overcomes this by delivering standardized, severity-rated audit reports with actionable remediation guidance for identified vulnerabilities.

Related Skills

Explore More Software Engineering Skills→
UnicornUnicorn

vulnerability-scan-agent

Scan code, dependencies, and configurations for known security vulnerabilities.

Official
Advanced
nksethnkseth

security-reviewer

Identify security vulnerabilities in code and infrastructure and deliver prioritized audit reports with remediation guidance.

Community
Advanced
dapperdiversdapperdivers
1

run-full-scan

Orchestrate reconnaissance, vulnerability scanning, source auditing, and report generation for penetration tests.

Community
Advanced
lamb92009lamb92009

security-reviewer

Identify vulnerabilities in code, configurations, and infrastructure with prioritized remediation guidance.

Community
Advanced