security-reviewer

Automate security audits with semgrep, trivy, gitleaks, and dependency scanners.

Updated Apr 25, 2026

Search Tags:#code review #security #vulnerability #audit #compliance #reporting

Ready to run

npx skills add https://github.com/Serg28/demosite --skill security-reviewer-serg28

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-reviewer
Source: https://github.com/Serg28/demosite/tree/main/.agents/skills/security-reviewer
Command: npx skills add https://github.com/Serg28/demosite --skill security-reviewer-serg28

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires semgrep, trivy, gitleaks, bandit, snyk, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps security teams efficiently identify vulnerabilities, generate comprehensive audit reports, and receive actionable remediation guidance, reducing manual effort and improving security posture.

Core Features & Use Cases

Vulnerability Identification: Detect security flaws in code, dependencies, and configurations across various environments.
Structured Reporting: Generate detailed, prioritized vulnerability reports tailored for compliance and internal review.
Use Case: Conduct a comprehensive security review of a web application by scanning source code, analyzing dependencies, and producing a clear remediation plan.

Quick Start

Load the provided security scan tools and execute a vulnerability assessment on your project directory.

Frequently Asked Questions about security-reviewer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I automate security audits and vulnerability assessments for my software project?▼

Automate security audits by scanning source code, analyzing dependencies, and checking configurations to identify vulnerabilities. This process evaluates system security effectively and generates structured reports to assist security teams with remediation and compliance.

What's the best way to generate structured vulnerability reports for compliance?▼

Generate structured vulnerability reports by conducting comprehensive security reviews that scan source code, analyze dependencies, and produce a clear remediation plan. These detailed, prioritized reports are tailored specifically for compliance and internal review.

Do I need semgrep and trivy installed to perform code security reviews?▼

Yes, performing code security reviews requires tools like semgrep, trivy, gitleaks, bandit, and snyk. These dependency scanners are necessary to evaluate system security effectively and detect security flaws across various environments.

Can I detect security flaws in both source code and dependencies simultaneously?▼

Yes, you can detect security flaws in source code, dependencies, and configurations simultaneously. The vulnerability identification process scans across various environments to identify vulnerabilities and generate actionable remediation guidance.

How does automated vulnerability detection reduce manual effort for security teams?▼

Automated vulnerability detection reduces manual effort by identifying vulnerabilities, generating comprehensive audit reports, and providing actionable remediation guidance. This streamlines security audits and improves the overall security posture efficiently.