One-click install
npx skills add https://github.com/jdiegosierra/sre-agent-plugin --skill security-reviewer-jdiegosierra
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-reviewer
Source: https://github.com/jdiegosierra/sre-agent-plugin/tree/main/skills/security-reviewer
Command: npx skills add https://github.com/jdiegosierra/sre-agent-plugin --skill security-reviewer-jdiegosierra

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps identify and mitigate security vulnerabilities in code and infrastructure, ensuring robust protection against threats.

Core Features & Use Cases

  • Vulnerability Scanning: Detects common security flaws in code (SAST) and dependencies.
  • Infrastructure Audits: Reviews cloud and container configurations for security best practices.
  • Use Case: Before deploying a new microservice, use this Skill to perform a comprehensive security audit, identifying potential SQL injection flaws, insecure configurations, and exposed secrets.

Quick Start

Use the security-reviewer skill to scan the current project for vulnerabilities.

Frequently Asked Questions about security-reviewer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a SAST scan to identify code vulnerabilities before deployment?▼

Perform infrastructure security audits by reviewing cloud and container configurations for best practices. This identifies insecure settings and exposed secrets in your infrastructure configurations.

Does this security audit approach work with Semgrep, Trivy, and Checkov?▼

Integrate security into DevSecOps by performing security audits, code vulnerability reviews, and infrastructure security analysis. This applies DevSecOps practices, SAST scans, and compliance checks to your workflow.

Can I review cloud and container configurations for security best practices?▼

Detect exposed secrets and insecure configurations by performing a comprehensive security audit. This scans your project to identify potential flaws in code and infrastructure configurations.

What is the best way to automate penetration testing and compliance checks for a microservice?▼

The best way to automate penetration testing and compliance checks for a microservice is using a comprehensive security audit skill. It identifies potential flaws and ensures compliance before deployment.