security-reviewer

Identify security risks in code and configurations with severity-based remediation.

2|Updated Feb 3, 2026

Search Tags:#security #remediation #vulnerabilities #best-practices #risk-assessment #threat-modeling #code-review

Ready to run

npx skills add https://github.com/k1lgor/virtual-company --skill security-reviewer-k1lgor

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-reviewer
Source: https://github.com/k1lgor/virtual-company/tree/main/skills/05-security-reviewer
Command: npx skills add https://github.com/k1lgor/virtual-company --skill security-reviewer-k1lgor

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Help developers quickly identify security flaws in code, configurations, and integration points, and provide practical remediation guidance.

Core Features & Use Cases

Vulnerability detection: Identify common issues such as injection, broken authentication, insecure defaults, and data exposure.
Risk prioritization: Classify findings as High/Medium/Low with concise reasons.
Remediation guidance: Propose minimal, practical fixes and link to official guidance when relevant.
Use Case: When reviewing an API endpoint, provide a targeted checklist and suggested code changes.

Quick Start

Provide a quick security review of the given codebase and return actionable fixes.

Frequently Asked Questions about security-reviewer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I identify security vulnerabilities in my code and configurations?▼

To identify security vulnerabilities, review authentication, authorization, data handling, input validation, and deployment contexts to surface potential weaknesses. This process categorizes findings by severity and provides concrete fixes referencing best practices.

What is the best way to prioritize security risks found during a code review?▼

The best way to prioritize security risks is to classify findings as High, Medium, or Low severity with concise reasons. This structured remediation approach helps developers focus on the most critical vulnerabilities first.

How do I get practical remediation guidance for insecure authentication and data exposure issues?▼

Practical remediation guidance for insecure authentication and data exposure proposes minimal, practical fixes and links to official guidance. It targets common issues like injection and broken authentication to provide actionable code changes.

Can I use this security review approach for API endpoint integration points?▼

Yes, you can use this security review approach for API endpoints. It provides a targeted checklist and suggested code changes to quickly identify security flaws and apply practical remediation guidance to integration points.

Does threat modeling help with finding broken authentication and input validation weaknesses?▼

Threat modeling helps find broken authentication and input validation weaknesses by assessing risks in code and configurations. It surfaces potential weaknesses across deployment contexts and provides structured remediation with concrete fixes.

What are the limitations of automated vulnerability detection in deployment contexts?▼

Automated vulnerability detection in deployment contexts is limited to identifying known issues like injection and insecure defaults. It requires manual review to apply proposed minimal fixes and validate that they align with relevant best practices.