security-reviewer

Identify and remediate security vulnerabilities across code, configuration, and architecture.

1|Updated Feb 2, 2026
One-click install
npx skills add https://github.com/micaelmalta/agentic --skill security-reviewer-micaelmalta
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-reviewer
Source: https://github.com/micaelmalta/agentic/tree/main/skills/security-reviewer
Command: npx skills add https://github.com/micaelmalta/agentic --skill security-reviewer-micaelmalta

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill enables teams to systematically uncover security vulnerabilities and insecure patterns in code, designs, and configurations, reducing the risk of exploitation before production.

Core Features & Use Cases

  • Threat modeling and security reviews across applications, APIs, and cloud deployments.
  • OWASP-aligned vulnerability checks covering authentication, authorization, input handling, data exposure, and logging.
  • Actionable remediation guidance with prioritized risk levels and concrete mitigations.

Quick Start

Ask the AI to perform a security review on the provided project and report the top risks with recommended mitigations.

Frequently Asked Questions about security-reviewer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform an OWASP-aligned security review on my web application?

An OWASP-aligned security review systematically checks authentication, authorization, input handling, data exposure, and logging across your web application to identify vulnerabilities and provide prioritized remediation guidance.

What is threat modeling for APIs and cloud services?

Threat modeling for APIs and cloud services is a structured security review process that uncovers vulnerabilities in architecture and configuration, reducing the risk of exploitation before production deployment.

How do I identify and fix authentication and authorization vulnerabilities in my code?

You identify and fix authentication and authorization vulnerabilities by running structured security audits that map flaws to OWASP standards and output concrete, prioritized mitigations.

Can I use this security audit for both code reviews and architecture design reviews?

Yes, this security audit is applicable to both code reviews and architecture design reviews, enabling teams to systematically uncover insecure patterns across code, designs, and configurations.

What's the best way to remediate data exposure and input handling flaws in my project?

The best way to remediate data exposure and input handling flaws is to perform a structured vulnerability check that maps findings to OWASP standards and provides prioritized, actionable remediation guidance.