skills.rest
u9401066
u9401066COMMUNITY
Explore all skills by this author →
GitHub

security-reviewer

Apply OWASP Top 10 checks to identify and remediate security risks in codebases.

1|Updated Feb 3, 2026
Search Tags:#vulnerability#threat-modeling#static-analysis#pr-review#security-review#code-audit#owasp-top-10
One-click install
npx skills add https://github.com/u9401066/anesthesia-exam --skill security-reviewer-u9401066
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-reviewer
Source: https://github.com/u9401066/anesthesia-exam/tree/main/.claude/skills/security-reviewer
Command: npx skills add https://github.com/u9401066/anesthesia-exam --skill security-reviewer-u9401066

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill performs security reviews for codebases to identify OWASP Top 10 risks and enforce security best practices, reducing vulnerability exposure.

Core Features & Use Cases

  • Automated OWASP Top 10 checks across web applications or APIs.
  • PR and CI integration to generate security reports and remediation guidance.
  • Threat modeling, vulnerability classification, and evidence-based recommendations.

Quick Start

Audit a codebase for OWASP Top 10 risks and generate a security compliance report.

Frequently Asked Questions about security-reviewer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate OWASP Top 10 security reviews for pull requests?▼

Automate OWASP Top 10 security reviews by integrating static analysis and threat modeling into PR pipelines to identify codebase vulnerabilities and generate remediation guidance.

What is static analysis threat modeling for codebase security?▼

Static analysis threat modeling for codebase security systematically identifies vulnerabilities by applying OWASP Top 10 checks and security best practices to produce evidence-based remediation reports.

Can I run security audits on web applications and APIs using CI pipelines?▼

You can run security audits on web applications and APIs using CI pipelines by configuring the scan scope for specific OWASP categories and custom rules to generate compliance reports.

Do I need repository and dependency manifests to perform codebase vulnerability scans?▼

Yes, codebase vulnerability scans require access to the code repository, dependency manifests, and environment configuration to perform accurate static analysis and evidence-based remediation.

What's the best way to classify vulnerabilities and generate security compliance reports?▼

The best way to classify vulnerabilities and generate security compliance reports is applying automated OWASP Top 10 checks with configurable scope across web applications, APIs, and services.

Are there limitations when applying custom rules for security best practices in CI scans?▼

Limitations when applying custom rules for security best practices in CI scans depend on the configurable scope set for OWASP categories, requiring full repository access for accurate static analysis.

Related Skills

Explore More Software Engineering Skills→
simplerick0simplerick0

sast

Scan source code for security flaws and produce markdown findings.

Community
Advanced
SensLiaoSensLiao

security-remediation

Automate security finding remediation with regression tests and evidence generation.

Community
Advanced
Geralt-byteGeralt-byte

github

Performs GitHub PR checks, workflow runs, and API queries via gh CLI.

Community
Intermediate
AutomatedMarketerAutomatedMarketer

security-reviewer

Scan application code, configuration, and dependencies for security vulnerabilities.

Community
Advanced