security-reviewer

Identify security vulnerabilities and generate structured audit reports.

Updated May 31, 2026
One-click install
npx skills add https://github.com/fanguyun/SkillManager --skill security-reviewer-fanguyun
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-reviewer
Source: https://github.com/fanguyun/SkillManager/tree/main/security-reviewer
Command: npx skills add https://github.com/fanguyun/SkillManager --skill security-reviewer-fanguyun

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill automates the process of identifying security vulnerabilities, generating structured audit reports, and providing remediation guidance, streamlining the security review process.

Core Features & Use Cases

  • Security Vulnerability Identification: Automatically scans for common security issues in code, infrastructure, and configurations.
  • Structured Audit Reports: Generates detailed reports with severity ratings and remediation guidance.
  • Use Case: Ideal for conducting regular security audits, reviewing code for vulnerabilities, or analyzing infrastructure security during DevSecOps practices.

Quick Start

Use the security-reviewer skill to perform a security audit on the codebase within the current directory.

Frequently Asked Questions about security-reviewer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate a security audit and vulnerability scanning for my codebase?

To automate a security audit and vulnerability scanning, you can use this Skill to scan code, infrastructure, and configurations. It identifies common security issues and generates structured audit reports with severity ratings and remediation guidance.

Can I integrate security vulnerability identification into DevSecOps practices?

Yes, you can integrate security vulnerability identification into DevSecOps practices. This Skill analyzes infrastructure security and code during reviews, making it ideal for regular security audits within automated DevSecOps workflows.

What is included in structured audit reports for security code reviews?

Structured audit reports for security code reviews include detailed findings of common security issues, severity ratings for each vulnerability, and actionable remediation guidance to streamline the security review process.

Do I need specific tools to perform infrastructure security analysis?

Performing infrastructure security analysis requires standard scanning and analysis tools like Read, Grep, Glob, and Bash. The Skill uses these dependencies to scan the codebase within the current directory and identify vulnerabilities.

What's the best way to review code for vulnerabilities without manual inspection?

The best way to review code for vulnerabilities without manual inspection is automating the process. This Skill automatically scans for common security issues in code and configurations, generating detailed reports to guide remediation.

Are there limitations to what an automated security audit can detect?

An automated security audit focuses on identifying common security vulnerabilities in code, infrastructure, and configurations. It generates structured reports with remediation guidance, but complex logical flaws may still require manual code review.