skills.rest
rabbicse
rabbicseCOMMUNITY
Explore all skills by this author →
GitHub

security-reviewer

Identify security vulnerabilities in code, dependencies, secrets, and infrastructure.

2|Updated Apr 18, 2021
Search Tags:#code review#security#vulnerability#penetration testing#compliance#sast#secrets scanning
One-click install
npx skills add https://github.com/rabbicse/go-projects --skill security-reviewer-rabbicse
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-reviewer
Source: https://github.com/rabbicse/go-projects/tree/main/projects/movie-ticket-booking/.claude/skills/security-reviewer
Command: npx skills add https://github.com/rabbicse/go-projects --skill security-reviewer-rabbicse

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Security-reviewer helps teams find vulnerabilities, secrets, and configuration weaknesses before attackers or compliance audits expose them, turning manual security review into a structured and repeatable workflow.

Core Features & Use Cases

  • Vulnerability Detection: Reviews code and infrastructure for injection flaws, auth issues, insecure defaults, and dependency risks.
  • Security Audit Reporting: Produces structured findings with severity, impact, file locations, and remediation guidance.
  • Use Case: A developer preparing a release can use this Skill to inspect the codebase for security bugs, secret leaks, and cloud misconfigurations, then generate a prioritized fix list.

Quick Start

Use the security-reviewer skill to audit the repository for security vulnerabilities and return a structured report with severity ratings, evidence, and remediation steps.

Frequently Asked Questions about security-reviewer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my codebase for security vulnerabilities before a release?▼

Security review identifies vulnerabilities in code, dependencies, and infrastructure by analyzing the repository for injection flaws, insecure defaults, and secret leaks. It generates a structured report with severity ratings, evidence, and remediation guidance.

How do I generate a compliance-ready security audit report with remediation steps?▼

Security audit reporting produces structured findings with severity ratings, impact analysis, file locations, and remediation guidance. It reviews code and infrastructure for injection flaws, auth issues, and dependency risks to generate a prioritized fix list.

Can I use a SAST scan to detect secrets and cloud misconfigurations in my code?▼

Yes, SAST scanning detects secrets and cloud misconfigurations by reviewing code and infrastructure for insecure defaults and leaked credentials. The scan outputs structured findings with file-level evidence and severity ratings.

Does penetration testing for DevSecOps pipelines cover dependency risks and auth issues?▼

Penetration testing for DevSecOps pipelines covers dependency risks and auth issues by inspecting the codebase and infrastructure. It identifies injection flaws and insecure defaults, returning report-ready findings with remediation guidance.

What is the best way to find leaked secrets and configuration weaknesses during code review?▼

The best way to find leaked secrets and configuration weaknesses during code review is auditing the repository for secret leaks and cloud misconfigurations. This produces a prioritized fix list with file-level evidence and severity ratings.

Related Skills

Explore More Software Engineering Skills→
wewetv1987-cellwewetv1987-cell

audit-code

Detect hardcoded secrets and security flaws in source repositories.

Community
Intermediate
maddhruvmaddhruv
207

absolute-audit

Scan codebases for security vulnerabilities in dependencies and code.

Community
Advanced
BrunoSantanaDeveloperBrunoSantanaDeveloper

vulnerability-scanner

Scan codebases for dependencies, secrets, and insecure patterns.

Community
Advanced
jassicsjassics
6

mobile-pentest

Automate MASTG-based mobile penetration tests on Android and iOS apps.

Community
Advanced