skills.rest
enigmaicon-eng
enigmaicon-engCOMMUNITY
Explore all skills by this author →
GitHub

security-reviewer

Identify security vulnerabilities and generate structured audit reports with severity ratings.

1|Updated May 16, 2026
Search Tags:#vulnerability assessment#security review#DevSecOps#SAST#compliance reporting#secrets scanning#remediation guidance
One-click install
npx skills add https://github.com/enigmaicon-eng/AI-Enterprise-OS --skill security-reviewer-enigmaicon-eng
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-reviewer
Source: https://github.com/enigmaicon-eng/AI-Enterprise-OS/tree/main/examples/claude-skills/skills/security-reviewer
Command: npx skills add https://github.com/enigmaicon-eng/AI-Enterprise-OS --skill security-reviewer-enigmaicon-eng

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps you identify security vulnerabilities and produce structured, prioritized audit reports that translate findings into concrete remediation steps.

Core Features & Use Cases

  • Vulnerability identification and severity rating: Detects issues across code, dependencies, secrets, and infrastructure and rates them as Critical/High/Medium/Low/Info for fast triage.
  • Deterministic scanning plus mandatory manual review: Runs common security tools while enforcing manual validation of auth, input handling, and crypto because tools miss context.
  • Professional reporting for compliance-ready outcomes: Produces audit-ready outputs including findings tables, executive summaries, and remediation guidance, aligned to common security frameworks and checklists.

Example use case: After a pull request introduces a potential auth weakness, run the security reviewer to scan for SAST findings, dependency risks, and leaked secrets, then produce a report with exact file locations and remediation steps suitable for stakeholders.

Quick Start

Request a security review for the current codebase and ask for a prioritized vulnerability report including locations, severity ratings, and remediation guidance.

Frequently Asked Questions about security-reviewer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I generate a security audit report with remediation guidance for my code?▼

To generate a security audit report, you run automated vulnerability scanning first, then manually validate security-critical logic to produce a structured report with severity ratings and actionable remediation steps.

Can I use this security review process for DevSecOps and compliance reporting?▼

Yes, the security review process is designed for compliance-focused DevSecOps workflows, producing audit-ready outputs like findings tables and executive summaries aligned to common security frameworks.

What is the best way to run SAST scans and secrets scanning before reporting?▼

The best way to run SAST and secrets scanning is to execute automated security tools first to detect initial issues, then perform mandatory manual validation to verify context before finalizing the audit report.

Does this vulnerability assessment approach require manual review after automated scanning?▼

Yes, this vulnerability assessment approach requires mandatory manual review after automated scanning to verify authorization, input handling, and crypto logic because automated tools miss contextual security nuances.

How do I prioritize security vulnerabilities found during an infrastructure review?▼

You prioritize security vulnerabilities by rating them as Critical, High, Medium, Low, or Info, allowing you to fast-triage infrastructure review findings and focus on the most severe risks first.

What should I check before running a security review on a pull request?▼

Before running a security review on a pull request, you should verify your rules of engagement and authorization permissions to ensure the automated scanning and manual validation processes are permitted.

Related Skills

Explore More Legal & Compliance Skills→
pacphipacphi
6

security-testing

Identify and validate security vulnerabilities in software applications.

Community
Advanced
Im5tuIm5tu
6

seo-audit

Identify and diagnose SEO issues across a site for organic visibility.

Community
Intermediate
lamb92009lamb92009

security-reviewer

Identify vulnerabilities in code, configurations, and infrastructure with prioritized remediation guidance.

Community
Advanced
xlelibertyxleliberty

security-pen-testing

Perform offensive security assessments with vulnerability scanning and penetration testing.

Community
Advanced