skills.rest
j7-dev
j7-devCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

security-reviewer

Detect OWASP Top 10 vulnerabilities and provide remediation guidance for software code.

19|4|Updated Mar 1, 2026
Search Tags:#code review#OWASP#security#vulnerability#penetration testing#secrets
One-click install
npx skills add https://github.com/j7-dev/everything-github-copilot --skill security-reviewer-j7-dev
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-reviewer
Source: https://github.com/j7-dev/everything-github-copilot/tree/main/skills/security-reviewer
Command: npx skills add https://github.com/j7-dev/everything-github-copilot --skill security-reviewer-j7-dev

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill proactively identifies and helps remediate security vulnerabilities in your code, protecting your application from common threats and ensuring compliance with security best practices.

Core Features & Use Cases

  • Vulnerability Detection: Scans code for OWASP Top 10 risks, secret exposure, injection flaws, and insecure configurations.
  • Remediation Guidance: Provides specific, actionable advice and code examples to fix identified vulnerabilities.
  • Use Case: After implementing a new API endpoint that handles user authentication, run this skill to ensure no critical security flaws are present before deployment.

Quick Start

Run a security review on the recently added authentication module.

Frequently Asked Questions about security-reviewer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my code for OWASP Top 10 vulnerabilities before deployment?▼

To detect OWASP Top 10 vulnerabilities, this skill scans your codebase for injection flaws and insecure configurations, providing actionable remediation guidance and code examples to secure your application.

What is the best way to detect exposed secrets and cryptographic flaws in source code?▼

Detecting exposed secrets and insecure cryptographic practices is done by analyzing your source code to identify sensitive data exposure, followed by specific recommendations to fix the identified vulnerabilities.

Can I use this for security auditing on a newly implemented API endpoint?▼

Yes, you can run a security review on newly implemented API endpoints to ensure no critical security flaws are present, proactively protecting the application against common attack vectors before deployment.

How does vulnerability remediation guidance work for identified injection flaws?▼

Vulnerability remediation guidance works by analyzing detected injection flaws and outputting specific, actionable advice alongside code examples to correct insecure code patterns.

Do I need penetration testing tools to perform proactive security code reviews?▼

No, you do not need external penetration testing tools to perform proactive security code reviews, as this skill handles automated vulnerability detection and remediation guidance directly within your development workflow.

Related Skills

Explore More Software Engineering Skills→
giang6283623giang6283623
4

threat-model-security-review

Perform threat-model-led security reviews of source code, APIs, and authentication logic.

Community
Advanced
KrismithReddy12KrismithReddy12

ios-fix

Automate iOS bug resolution from source analysis to device verification.

Community
Advanced
matteocervellimatteocervelli
25

security-scanner

Scan codebases for secrets, vulnerable dependencies, and insecure patterns.

Community
Advanced
SkobynSkobyn

hunt-sqli

Detect and exploit SQL injection vulnerabilities in web applications.

Community
Advanced