security-reviewer

Name: security-reviewer
Availability: InStock
Author: johngutierrez31

Audit code and infrastructure for security vulnerabilities using SAST tools.

Updated Feb 20, 2026

Search Tags:#code review #security #vulnerability #penetration testing #DevSecOps #SAST

Ready to run

npx skills add https://github.com/johngutierrez31/VantageAI --skill security-reviewer-johngutierrez31

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-reviewer
Source: https://github.com/johngutierrez31/VantageAI/tree/main/.agents/skills/security-reviewer
Command: npx skills add https://github.com/johngutierrez31/VantageAI --skill security-reviewer-johngutierrez31

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps identify and remediate security vulnerabilities in code and infrastructure, protecting against breaches and ensuring compliance.

Core Features & Use Cases

Code Security Audits: Scans code for common vulnerabilities like SQL injection, XSS, and secrets.
Infrastructure Security: Reviews cloud configurations and container security best practices.
Use Case: Before deploying a new microservice, use this Skill to perform a thorough security review of its codebase and cloud deployment configuration to catch critical flaws.

Quick Start

Use the security-reviewer skill to scan the current directory for vulnerabilities and provide a remediation report.

Frequently Asked Questions about security-reviewer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I conduct a security audit of my codebase for vulnerabilities?▼

Conduct a security audit by scanning your codebase for vulnerabilities like SQL injection and XSS using SAST tools. This skill analyzes vulnerability patterns and insecure configurations to generate a remediation report.

Can I review cloud configurations and container security with this skill?▼

Yes, you can review cloud configurations and container security. It evaluates infrastructure security best practices to identify risks related to insecure deployments and misconfigurations in your environment.

How do I check my code for exposed secrets before deployment?▼

Check for exposed secrets by running a comprehensive security scan on your directory. It identifies secrets exposure and code vulnerabilities, providing remediation steps to ensure compliance before deployment.

How does SAST vulnerability pattern analysis work for microservice deployments?▼

SAST vulnerability pattern analysis works by scanning source code statically to identify structural flaws. It catches critical security risks in microservice codebases and cloud deployment configurations before release.

Do I need knowledge of Semgrep or Trivy to run a security review?▼

Yes, you need knowledge of security tools like Semgrep and Trivy. This skill leverages them for SAST and vulnerability scanning, requiring familiarity with cloud security principles to interpret results.

What is the best way to find insecure infrastructure configurations in my code?▼

The best way to find insecure infrastructure configurations is performing a comprehensive security audit. It analyzes cloud deployment configurations and vulnerability patterns to catch critical flaws and ensure compliance.