skills.rest
shalevamin
shalevaminCOMMUNITY
Explore all skills by this author →
GitHub

security-reviewer

Identify security vulnerabilities in code and infrastructure with structured audit reports.

Updated Mar 7, 2026
Search Tags:#security#vulnerability#audit#compliance#DevSecOps#SAST
One-click install
npx skills add https://github.com/shalevamin/The-_Ultimate_agents --skill security-reviewer-shalevamin
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-reviewer
Source: https://github.com/shalevamin/The-_Ultimate_agents/tree/main/.claude/skills/security-reviewer
Command: npx skills add https://github.com/shalevamin/The-_Ultimate_agents --skill security-reviewer-shalevamin

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill addresses the critical need for identifying and mitigating security vulnerabilities in code and infrastructure, ensuring robust application and system security.

Core Features & Use Cases

  • Vulnerability Identification: Scans code (SAST), dependencies, and infrastructure configurations for known security flaws.
  • Audit Reporting: Generates structured reports detailing findings, severity ratings (CVSS), and impact.
  • Remediation Guidance: Provides actionable steps to fix identified vulnerabilities.
  • Use Case: When preparing for a compliance audit or releasing a new feature, use this Skill to perform a thorough security review of the codebase and deployed infrastructure to proactively address potential risks.

Quick Start

Use the security-reviewer skill to scan the current directory for security vulnerabilities and generate a report.

Frequently Asked Questions about security-reviewer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a SAST scan and dependency audit for my codebase?▼

You can perform a SAST scan and dependency audit by using this Skill to scan your current directory. It analyzes code, configurations, and dependencies to identify vulnerabilities and generate structured audit reports with severity ratings and remediation guidance.

What is included in a security vulnerability audit report?▼

A security vulnerability audit report includes structured findings with CVSS severity ratings and impact analysis. It also provides actionable remediation guidance to help you fix identified vulnerabilities in code, dependencies, and infrastructure configurations.

Can I automate compliance checks and DevSecOps practices using this approach?▼

Yes, you can automate compliance and DevSecOps practices by integrating this Skill into your workflow. It analyzes code and infrastructure configurations to proactively identify risks and support compliance automation before audits or feature releases.

Does this security review tool scan infrastructure configurations and secrets?▼

Yes, this security review tool scans infrastructure configurations and performs secrets scanning. It conducts infrastructure security checks alongside SAST scans and dependency audits to identify vulnerabilities across your deployed environment.

Do I need any dependencies installed to run a security review?▼

No, you do not need any dependencies installed to run a security review. The Skill operates independently without external dependencies to scan your directory and generate actionable remediation guidance for identified vulnerabilities.

Related Skills

Explore More Software Engineering Skills→
UnicornUnicorn

vulnerability-scan-agent

Scan code, dependencies, and configurations for known security vulnerabilities.

Official
Advanced
aaronjmarsaaronjmars
17

Vuln Scanner

Scan GitHub repositories for security vulnerabilities in code, dependencies, and configurations.

Community
Advanced
jaskaranhundaljaskaranhundal
3

pipeline-security-scan

Scan CI/CD pipeline configurations for security vulnerabilities and compliance.

Community
Intermediate
lamb92009lamb92009

security-reviewer

Identify vulnerabilities in code, configurations, and infrastructure with prioritized remediation guidance.

Community
Advanced