skills.rest
stephanj
stephanjCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

security-reviewer

Conducts security audits and vulnerability assessments on codebases and infrastructure.

9|2|Updated Jan 29, 2026
Search Tags:#security#vulnerability#audit#penetration testing#sast#devsecops
One-click install
npx skills add https://github.com/stephanj/claude-code-collections --skill security-reviewer-stephanj
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-reviewer
Source: https://github.com/stephanj/claude-code-collections/tree/main/skills/security-reviewer
Command: npx skills add https://github.com/stephanj/claude-code-collections --skill security-reviewer-stephanj

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This skill streamlines the complex process of identifying security vulnerabilities, ensuring that codebases and infrastructure meet industry standards without manual oversight gaps.

Core Features & Use Cases

  • Automated Vulnerability Scanning: Integrates SAST, dependency auditing, and secret detection to identify risks early.
  • Manual Review Guidance: Provides structured frameworks for penetration testing and infrastructure hardening.
  • Use Case: Use this skill to perform a comprehensive security audit on a new repository, identifying hardcoded secrets, outdated dependencies, and potential SQL injection points before deployment.

Quick Start

Invoke the security reviewer skill to perform a full vulnerability scan and generate a remediation report for the current project directory.

Frequently Asked Questions about security-reviewer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate a security audit for my codebase?▼

To automate a security audit, you can run a comprehensive vulnerability assessment that integrates SAST scanning, dependency auditing, and secret detection to identify risks early without manual oversight.

What does static application security testing find in a repository?▼

Static application security testing identifies hardcoded secrets, outdated dependencies, and potential injection points like SQL vulnerabilities, generating an actionable remediation report for the current project directory.

Can I use this for penetration testing and infrastructure hardening?▼

Yes, penetration testing and infrastructure hardening are supported through structured manual review frameworks, providing guidance for comprehensive vulnerability assessments across your codebase and infrastructure.

Does this vulnerability scan verify DevSecOps compliance?▼

Yes, the vulnerability scan performs DevSecOps compliance verification by combining automated threat detection and secret identification to ensure codebases meet industry security standards.

What is the best way to detect hardcoded secrets before deployment?▼

The best way to detect hardcoded secrets before deployment is to invoke an automated secret identification scan that analyzes the project directory and generates a remediation report.

When do I need to perform a comprehensive vulnerability assessment?▼

You need a comprehensive vulnerability assessment when preparing a new repository for deployment, ensuring automated threat detection and dependency auditing catch security gaps before release.

Related Skills

Explore More Software Engineering Skills→
yocxy2yocxy2

cso

Automate security audits and threat modeling for software repositories.

Community
Advanced
riparinoriparino
1

defensive-vulnerability-management

Automates vulnerability prioritization and remediation using KQL enrichment and patch verification.

Community
Advanced
zangxin75zangxin75

security-reviewer

Conduct security audits and code vulnerability reviews with SAST scans.

Community
Advanced
Mentor-WizardMentor-Wizard
10

security-reviewer

Conduct security audits with SAST scans, vulnerability analysis, and penetration testing.

Official
Advanced