skills.rest
jsdfhasuh
jsdfhasuhCOMMUNITY
Explore all skills by this author →
GitHub

security-reviewer

Audit code and infrastructure for vulnerabilities with severity-rated remediation reports.

Updated Aug 27, 2026
Search Tags:#penetration testing#security review#DevSecOps#SAST#vulnerability scanning#secrets detection#security reporting
One-click install
npx skills add https://github.com/jsdfhasuh/emosonic --skill security-reviewer-jsdfhasuh
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-reviewer
Source: https://github.com/jsdfhasuh/emosonic/tree/main/.agents/skills/security-reviewer
Command: npx skills add https://github.com/jsdfhasuh/emosonic --skill security-reviewer-jsdfhasuh

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Security Reviewer helps you uncover software and infrastructure vulnerabilities early by combining automated scanning with expert manual validation so you can produce actionable findings and remediation guidance.

Core Features & Use Cases

  • Structured security audit workflow: scopes attack surface, runs automated checks, validates findings, and classifies severity (Critical/High/Medium/Low).
  • Vulnerability review across common risk areas: emphasizes authentication/authorization, input handling, crypto, and dependency risks, with evidence and file/line locations.
  • Penetration testing guardrails and reporting: supports authorized testing activities, proof-of-concept validation, and a professional report format tailored for decision-makers.

Quick Start

Run a security review of the repository, including SAST, secrets detection, vulnerability pattern checks, and a prioritized remediation report.

Frequently Asked Questions about security-reviewer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a security review on my codebase to find vulnerabilities?▼

A security review combines scope verification, automated vulnerability scanning, and expert manual validation to identify misconfigurations and risks across code, dependencies, and infrastructure.

Can I use this for penetration testing and proof-of-concept validation?▼

Yes, penetration testing is supported through authorized testing guardrails, proof-of-concept validation, and professional report generation tailored for decision-makers.

Does the security audit cover secrets detection and dependency checks?▼

The security audit covers secrets detection and dependency checks alongside SAST and vulnerability pattern checks to uncover software risks early.

What is the best way to report security vulnerabilities for compliance teams?▼

The best way to report vulnerabilities for compliance is to generate a severity-rated report with actionable remediation, consistent classification, and evidence including file and line locations.

Does the vulnerability scanning support infrastructure and cloud security assessments?▼

Vulnerability scanning supports infrastructure and cloud security assessments by applying scope verification and manual review to identify misconfigurations.

What are the limitations of automated security scanning without manual validation?▼

Automated security scanning without manual validation may produce false positives or miss complex logic flaws in authentication, authorization, and input handling that require expert review.

Related Skills

Explore More Legal & Compliance Skills→
claudcherejiclaudchereji

penetration-tester

Execute authorized penetration tests and vulnerability assessments on systems, networks, and applications.

Community
Advanced
dieu-donneedieu-donnee

security-reviewer

Identify security vulnerabilities in code and infrastructure with severity-rated audit reports.

Community
Advanced
benjaminshoemakerbenjaminshoemaker
39

security-scan

Scan codebases for dependency vulnerabilities, risky patterns, and secrets.

Community
Intermediate
linardsblinardsb

security-engineering

Assess vulnerabilities and verify compliance across cloud and application systems.

Community
Advanced