security-reviewer

Audit code and cloud configurations for security vulnerabilities.

Updated Jan 11, 2017

Search Tags:#code review #security #vulnerability #penetration testing #DevSecOps #cloud security

Ready to run

npx skills add https://github.com/kaustubhhiware/dotfiles --skill security-reviewer-kaustubhhiware

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-reviewer
Source: https://github.com/kaustubhhiware/dotfiles/tree/main/claude/skills/security-reviewer
Command: npx skills add https://github.com/kaustubhhiware/dotfiles --skill security-reviewer-kaustubhhiware

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill addresses the critical need to identify and mitigate security vulnerabilities in code and infrastructure, ensuring robust application security and compliance.

Core Features & Use Cases

Code Vulnerability Scanning: Detects common security flaws like SQL injection, XSS, and insecure deserialization using SAST tools.
Infrastructure Security Audits: Reviews cloud configurations (AWS, Azure, GCP) and container security (Docker, Kubernetes) against best practices and compliance standards.
Penetration Testing Support: Provides guidance and tools for reconnaissance, vulnerability testing, and exploitation validation.
Use Case: Before deploying a new microservice, use this Skill to perform a comprehensive security audit, identifying and prioritizing vulnerabilities in the code and its deployment configuration.

Quick Start

Use the security-reviewer skill to scan the current codebase for common vulnerabilities.

Frequently Asked Questions about security-reviewer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I scan application code for vulnerabilities like SQL injection and XSS?▼

To scan application code for vulnerabilities like SQL injection and XSS, you can perform a comprehensive security audit using SAST tools to detect common security flaws and insecure deserialization across your codebase.

How do I audit cloud configurations for security misconfigurations in AWS, Azure, or GCP?▼

You can audit cloud configurations for security misconfigurations in AWS, Azure, or GCP by reviewing them against cloud security best practices and compliance standards to identify infrastructure vulnerabilities.

Can I use penetration testing methodologies to validate vulnerabilities in my microservice deployment?▼

Yes, you can validate vulnerabilities in your microservice deployment by leveraging penetration testing methodologies, which provide guidance for reconnaissance, vulnerability testing, and exploitation validation.

Does container security auditing work with Docker and Kubernetes configurations?▼

Yes, container security auditing works with Docker and Kubernetes configurations by analyzing your container setups to identify potential security flaws and misconfigurations before deployment.

What is the best way to identify secrets exposure in code and infrastructure?▼

The best way to identify secrets exposure in code and infrastructure is to execute a comprehensive security audit that analyzes application code, container configurations, and cloud environments for exposed sensitive data.

When do I need to perform a comprehensive security audit on my infrastructure?▼

You need to perform a comprehensive security audit on your infrastructure before deploying a new microservice, ensuring you identify and prioritize vulnerabilities in both the code and its deployment configuration.