skills.rest
johngutierrez31
johngutierrez31COMMUNITY
Explore all skills by this author →
GitHub

security-reviewer

Audit code and infrastructure for security vulnerabilities using SAST tools.

Updated Feb 20, 2026
Search Tags:#code review#security#vulnerability#penetration testing#DevSecOps#SAST
One-click install
npx skills add https://github.com/johngutierrez31/VantageAI --skill security-reviewer-johngutierrez31
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-reviewer
Source: https://github.com/johngutierrez31/VantageAI/tree/main/.agents/skills/security-reviewer
Command: npx skills add https://github.com/johngutierrez31/VantageAI --skill security-reviewer-johngutierrez31

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps identify and remediate security vulnerabilities in code and infrastructure, protecting against breaches and ensuring compliance.

Core Features & Use Cases

  • Code Security Audits: Scans code for common vulnerabilities like SQL injection, XSS, and secrets.
  • Infrastructure Security: Reviews cloud configurations and container security best practices.
  • Use Case: Before deploying a new microservice, use this Skill to perform a thorough security review of its codebase and cloud deployment configuration to catch critical flaws.

Quick Start

Use the security-reviewer skill to scan the current directory for vulnerabilities and provide a remediation report.

Frequently Asked Questions about security-reviewer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I conduct a security audit of my codebase for vulnerabilities?▼

Conduct a security audit by scanning your codebase for vulnerabilities like SQL injection and XSS using SAST tools. This skill analyzes vulnerability patterns and insecure configurations to generate a remediation report.

Can I review cloud configurations and container security with this skill?▼

Yes, you can review cloud configurations and container security. It evaluates infrastructure security best practices to identify risks related to insecure deployments and misconfigurations in your environment.

How do I check my code for exposed secrets before deployment?▼

Check for exposed secrets by running a comprehensive security scan on your directory. It identifies secrets exposure and code vulnerabilities, providing remediation steps to ensure compliance before deployment.

How does SAST vulnerability pattern analysis work for microservice deployments?▼

SAST vulnerability pattern analysis works by scanning source code statically to identify structural flaws. It catches critical security risks in microservice codebases and cloud deployment configurations before release.

Do I need knowledge of Semgrep or Trivy to run a security review?▼

Yes, you need knowledge of security tools like Semgrep and Trivy. This skill leverages them for SAST and vulnerability scanning, requiring familiarity with cloud security principles to interpret results.

What is the best way to find insecure infrastructure configurations in my code?▼

The best way to find insecure infrastructure configurations is performing a comprehensive security audit. It analyzes cloud deployment configurations and vulnerability patterns to catch critical flaws and ensure compliance.

Related Skills

Explore More Software Engineering Skills→
OpenLaborOpenLabor
4

Security Scan

Identify and remediate security vulnerabilities in codebases and infrastructure.

Official
Intermediate
Avihai-HAvihai-H

azure-validate

Validate Azure infrastructure configurations and prerequisites before deployment.

Community
Advanced
duanbiao2000duanbiao2000
3

sast-configuration

Configure Semgrep, SonarQube, and CodeQL for automated vulnerability detection.

Community
Advanced
hypnguyen1209hypnguyen1209
338

network-attack

Plan and execute Active Directory penetration testing workflows with Cyber Kill Chain alignment.

Community
Advanced