skills.rest
Mentor-Wizard
Mentor-WizardOFFICIAL
Explore all skills by this author →
GitHub

security-reviewer

Conduct security audits with SAST scans, vulnerability analysis, and penetration testing.

10|3|Updated Mar 14, 2025
Search Tags:#code review#security#vulnerability#audit#penetration testing#DevSecOps
One-click install
npx skills add https://github.com/Mentor-Wizard/mentor-wizard-webapp --skill security-reviewer-mentor-wizard
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-reviewer
Source: https://github.com/Mentor-Wizard/mentor-wizard-webapp/tree/main/.claude/skills/security-reviewer
Command: npx skills add https://github.com/Mentor-Wizard/mentor-wizard-webapp --skill security-reviewer-mentor-wizard

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps identify and fix security vulnerabilities in code and infrastructure, protecting against breaches and ensuring compliance.

Core Features & Use Cases

  • Vulnerability Scanning: Performs SAST scans, dependency audits, and secrets scanning.
  • Penetration Testing: Simulates attacks to find exploitable weaknesses.
  • Infrastructure Security: Reviews cloud and container security configurations.
  • Use Case: Before deploying a new feature, use this Skill to conduct a thorough security audit, identifying and prioritizing any potential risks like SQL injection or exposed credentials.

Quick Start

Use the security-reviewer skill to scan the codebase for any critical vulnerabilities.

Frequently Asked Questions about security-reviewer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a SAST scan to find code vulnerabilities before deployment?▼

A SAST scan analyzes source code to identify security vulnerabilities like injection flaws and misconfigurations. This skill conducts comprehensive SAST scans, dependency audits, and secrets scanning to detect and prioritize critical risks before deployment.

How does penetration testing simulation find exploitable weaknesses in my code?▼

Penetration testing simulates attacks on code and infrastructure to uncover exploitable security weaknesses. This skill performs simulated attacks to identify authentication, authorization, and injection flaws that automated scanning might miss.

Can I use an automated security audit to review cloud and container configurations?▼

Yes, an automated security audit can review cloud and container configurations. This skill analyzes infrastructure security to identify misconfigurations, protecting cloud environments and containers against breaches and ensuring compliance.

What is the best way to scan a codebase for exposed credentials and authentication risks?▼

The best way to scan for exposed credentials is using a security audit tool that performs automated secrets scanning. This skill identifies exposed credentials and authentication risks by analyzing code using Read, Grep, and Bash tools.

Why do I need DevSecOps vulnerability scanning for new features?▼

DevSecOps vulnerability scanning is needed for new features to identify and fix security risks before production deployment. This skill conducts thorough security audits to find injection flaws and exposed credentials, protecting against breaches and ensuring compliance.

Related Skills

Explore More Software Engineering Skills→
CarlosQ96CarlosQ96

localize

Detect hardcoded strings and build translation-ready JSON string tables.

Community
Advanced
josavicentevwjosavicentevw
1

devsecops

Automate security scanning and governance across CI/CD pipelines and compliance workflows.

Community
Advanced
vladm3105vladm3105
16

security-audit

Identify security vulnerabilities across code, dependencies, infrastructure, and configurations.

Community
Advanced
aivos-xieaivos-xie
1

cloud-security

Audit and penetration test AWS, Azure, GCP, and Kubernetes environments.

Community
Advanced