security-reviewer

Review security design documents and code for vulnerabilities with remediation advice.

Updated Jan 8, 2026

Search Tags:#code review #security #secure coding #vulnerability assessment #penetration testing #design review

Ready to run

npx skills add https://github.com/takemo101/compose-workflow --skill security-reviewer-takemo101

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-reviewer
Source: https://github.com/takemo101/compose-workflow/tree/main/.pi/skills/security-reviewer
Command: npx skills add https://github.com/takemo101/compose-workflow --skill security-reviewer-takemo101

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill addresses the critical need for robust security in software development by providing expert review of security design documents and implementation code, preventing vulnerabilities before they reach production.

Core Features & Use Cases

Security Design Review: Analyzes design documents for adherence to security best practices (e.g., Security by Design principles).
Code Security Audit: Scans implementation code for common and critical security flaws like injection vulnerabilities, authentication/authorization issues, and data exposure.
Vulnerability Reporting: Provides a detailed breakdown of identified vulnerabilities, including severity, attack scenarios, and remediation suggestions.
Use Case: Before merging a new feature, run this Skill to ensure the authentication logic is secure and no sensitive data is exposed in error messages.

Quick Start

Review the security design document located at /docs/security_design.md for potential vulnerabilities.

Frequently Asked Questions about security-reviewer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I review code for security vulnerabilities before deployment?▼

Code security audits identify critical flaws like injection vulnerabilities, authentication issues, and data exposure in implementation code. Reviews analyze implementation code against industry standards like OWASP Top 10 and CWE/SANS Top 25 to prevent vulnerabilities before production.

How do I check my security design documents for adherence to best practices?▼

Security design review analyzes design documents for adherence to Security by Design principles. It evaluates the architecture against industry standards to identify potential vulnerabilities and reports findings with remediation advice.

What security standards are used for vulnerability assessment in code reviews?▼

Vulnerability assessment during code review focuses on industry standards like OWASP Top 10 and CWE/SANS Top 25. It targets specific issues including injection, authentication, authorization, XSS, CSRF, and data protection flaws.

Can I analyze implementation code for injection and authentication issues?▼

Yes, code security audits scan implementation code for common security flaws including injection vulnerabilities and authentication or authorization issues. The review outputs a detailed vulnerability summary with attack scenarios and specific remediation suggestions.

What is the best way to report vulnerabilities found during a code security audit?▼

Vulnerability reporting provides a detailed breakdown of identified flaws including severity and attack scenarios. Reports output specific findings with actionable remediation advice based on industry standards like CWE/SANS Top 25.

Does this security review process cover XSS, CSRF, and data protection vulnerabilities?▼

Yes, security reviews specifically focus on XSS, CSRF, and data protection alongside injection and authentication vulnerabilities. The review outputs a detailed vulnerability summary and specific findings with remediation advice based on industry standards.