skills.rest
takemo101
takemo101COMMUNITY
Explore all skills by this author →
GitHub

security-reviewer

Review security design documents and code for vulnerabilities with remediation advice.

Updated Jan 8, 2026
Search Tags:#code review#security#secure coding#vulnerability assessment#penetration testing#design review
One-click install
npx skills add https://github.com/takemo101/compose-workflow --skill security-reviewer-takemo101
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-reviewer
Source: https://github.com/takemo101/compose-workflow/tree/main/.pi/skills/security-reviewer
Command: npx skills add https://github.com/takemo101/compose-workflow --skill security-reviewer-takemo101

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill addresses the critical need for robust security in software development by providing expert review of security design documents and implementation code, preventing vulnerabilities before they reach production.

Core Features & Use Cases

  • Security Design Review: Analyzes design documents for adherence to security best practices (e.g., Security by Design principles).
  • Code Security Audit: Scans implementation code for common and critical security flaws like injection vulnerabilities, authentication/authorization issues, and data exposure.
  • Vulnerability Reporting: Provides a detailed breakdown of identified vulnerabilities, including severity, attack scenarios, and remediation suggestions.
  • Use Case: Before merging a new feature, run this Skill to ensure the authentication logic is secure and no sensitive data is exposed in error messages.

Quick Start

Review the security design document located at /docs/security_design.md for potential vulnerabilities.

Frequently Asked Questions about security-reviewer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review code for security vulnerabilities before deployment?▼

Code security audits identify critical flaws like injection vulnerabilities, authentication issues, and data exposure in implementation code. Reviews analyze implementation code against industry standards like OWASP Top 10 and CWE/SANS Top 25 to prevent vulnerabilities before production.

How do I check my security design documents for adherence to best practices?▼

Security design review analyzes design documents for adherence to Security by Design principles. It evaluates the architecture against industry standards to identify potential vulnerabilities and reports findings with remediation advice.

What security standards are used for vulnerability assessment in code reviews?▼

Vulnerability assessment during code review focuses on industry standards like OWASP Top 10 and CWE/SANS Top 25. It targets specific issues including injection, authentication, authorization, XSS, CSRF, and data protection flaws.

Can I analyze implementation code for injection and authentication issues?▼

Yes, code security audits scan implementation code for common security flaws including injection vulnerabilities and authentication or authorization issues. The review outputs a detailed vulnerability summary with attack scenarios and specific remediation suggestions.

What is the best way to report vulnerabilities found during a code security audit?▼

Vulnerability reporting provides a detailed breakdown of identified flaws including severity and attack scenarios. Reports output specific findings with actionable remediation advice based on industry standards like CWE/SANS Top 25.

Does this security review process cover XSS, CSRF, and data protection vulnerabilities?▼

Yes, security reviews specifically focus on XSS, CSRF, and data protection alongside injection and authentication vulnerabilities. The review outputs a detailed vulnerability summary and specific findings with remediation advice based on industry standards.

Related Skills

Explore More Software Engineering Skills→
SylphxAISylphxAI
4

security

Identify and mitigate web application security risks with OWASP-aligned reviews.

Official
Basic
ntaksh42ntaksh42
1

security-audit

Detect OWASP Top 10 vulnerabilities, insecure dependencies, and security misconfigurations.

Community
Advanced
dreadnodedreadnode
11

vuln-critic

Filter low-quality and false positive vulnerability findings from scanners and agent output.

Official
Intermediate
summarybotngsummarybotng
2

security-testing

Scan code, dependencies, and configurations for OWASP Top 10 vulnerabilities.

Official
Advanced