skills.rest
kumaran-is
kumaran-isCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

security-reviewer

Identify OWASP-aligned security vulnerabilities in source code and generate remediation reports.

34|21|Updated Feb 1, 2026
Search Tags:#automation#security#vulnerability#owasp#static-analysis#code-review#secret-detection
One-click install
npx skills add https://github.com/kumaran-is/claude-code-onboarding --skill security-reviewer-kumaran-is
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-reviewer
Source: https://github.com/kumaran-is/claude-code-onboarding/tree/main/.claude/skills/security-reviewer
Command: npx skills add https://github.com/kumaran-is/claude-code-onboarding --skill security-reviewer-kumaran-is

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This skill helps developers and security teams quickly identify and remediate security vulnerabilities in code by applying a structured review methodology.

Core Features & Use Cases

  • OWASP Top 10 checklists, secret scanning patterns, and a reproducible review workflow.
  • For a web application, automatically flag hardcoded secrets, insecure configurations, and weak authentication patterns, then generate a remediation report.
  • Use Case: Integrate into CI or perform a targeted pull-request security review to accelerate secure delivery.

Quick Start

Run a security review against your codebase to generate a findings report using the built-in checklist.

Frequently Asked Questions about security-reviewer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate security vulnerability detection in source code?▼

Run a security review by loading an OWASP-aligned checklist to scan source code with pattern matching, evaluate findings against severity levels, and produce a structured remediation report for your codebase.

What is static analysis for secret detection in code reviews?▼

Static analysis for secret detection scans source code patterns to identify hardcoded credentials and insecure configurations, enabling developers to flag and remediate vulnerabilities during code reviews.

Can I use OWASP checklists to scan pull requests in CI pipelines?▼

Yes, you can apply OWASP Top 10 checklists to scan pull requests and integrate the security review workflow directly into CI pipelines to accelerate secure delivery across multiple repositories.

How do I generate a security remediation report for weak authentication patterns?▼

Generate a remediation report by scanning codebases for weak authentication patterns and hardcoded secrets, then evaluating the discovered vulnerabilities against standardized severity metrics to document fixes.

Does this security review workflow support multiple programming languages?▼

The security review workflow supports auditing codebases across multiple languages and repositories, applying standardized OWASP-aligned checklists to identify insecure configurations and vulnerabilities.

What is the best way to identify hardcoded secrets during a code audit?▼

The best way to identify hardcoded secrets is using secret scanning patterns during a structured security review, which flags exposed credentials and generates a reproducible findings report for remediation.

Related Skills

Explore More Software Engineering Skills→
projectedanxprojectedanx
1

cipher

Audit source code repositories with a four-phase state machine for security vulnerabilities.

Community
Advanced
mwathibenmwathiben

senior-secops

Automate security operations tasks and generate structured reports.

Community
Advanced
CenredJunCenredJun

security-auditor

Scan JavaScript, TypeScript, and Python codebases for vulnerabilities and secrets.

Community
Advanced
brenordvbrenordv

security

Audit software systems for security vulnerabilities and regulatory compliance.

Community
Advanced