skills.rest
ralvarezdev
ralvarezdevCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

security-reviewer

Identify security issues in codebases and produce structured findings reports.

3|Updated Feb 26, 2026
Search Tags:#security#vulnerability#tooling#static-analysis#code-review#pr-audit
One-click install
npx skills add https://github.com/ralvarezdev/ralvaskills --skill security-reviewer-ralvarezdev
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-reviewer
Source: https://github.com/ralvarezdev/ralvaskills/tree/main/skills/quality/security-reviewer
Command: npx skills add https://github.com/ralvarezdev/ralvaskills --skill security-reviewer-ralvarezdev

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Reviews code for security issues before they reach production. This skill catches the issues that architect skills already encode rules against; it's the safety net. Findings table, severity rubric, and tooling reference in RECIPES.md.

Core Features & Use Cases

  • Tool-assisted static analysis across languages for PR audits.
  • Structured findings with severity, location, evidence, and fixes to guide remediation.
  • Use cases include pre-release reviews, new endpoints, dependency updates, and security posture checks.

Quick Start

Run a security review on the target codebase to surface vulnerabilities and misconfigurations before merge.

Frequently Asked Questions about security-reviewer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate security review for pull requests?▼

Automated security review for pull requests identifies injection, authentication, secrets, and deserialization issues before deployment. It runs tool-assisted static analysis across languages and produces a structured findings report with severity, location, evidence, and fixes.

What's the best way to find security vulnerabilities before deployment?▼

Finding security vulnerabilities before deployment involves applying static analysis to pre-release checks, new endpoints, and dependency updates. The review surfaces misconfigurations and structured findings to guide remediation before code merges.

Can I run static analysis for security issues across multiple programming languages?▼

Static analysis for security issues supports multiple programming languages during PR audits and pre-release checks. It focuses on detecting injection, authentication, secrets, and deserialization vulnerabilities across the codebase.

How does a pre-release security audit report vulnerabilities?▼

A pre-release security audit reports vulnerabilities using a structured findings table with severity rubric and tooling references. Each finding includes specific location, evidence, and recommended fixes to guide remediation.

When do I need to run a security posture check on my codebase?▼

A security posture check is needed during pre-release reviews, when adding new endpoints, and when updating dependencies. It catches security issues before they reach production by identifying vulnerabilities and misconfigurations before merge.

Related Skills

Explore More Software Engineering Skills→
UnicornUnicorn

analyzer-agent

Perform read-only static analysis and security scanning of codebases.

Official
Advanced
simotasimota
68

Sentinel

Detect and remediate codebase vulnerabilities including hardcoded secrets and SQL injection.

Community
Advanced
AnveioAnveio
1

task-pull-request

Automate GitHub pull request creation, reviews, feedback, and merges via gh CLI.

Community
Intermediate
icartshicartsh
4

code-analyze

Analyze .NET solutions for code quality, security, and dependency issues.

Community
Advanced