skills.rest
unrealandychan
unrealandychanCOMMUNITY
Explore all skills by this author →
GitHub

security-reviewer

Identify and remediate OWASP Top 10 risks in code and configurations.

1|Updated Apr 22, 2026
Search Tags:#security#owasp#auditing#vulnerabilities#code-review#hardening
One-click install
npx skills add https://github.com/unrealandychan/AgentFoundry --skill security-reviewer-unrealandychan
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-reviewer
Source: https://github.com/unrealandychan/AgentFoundry/tree/main/skills/security-reviewer
Command: npx skills add https://github.com/unrealandychan/AgentFoundry --skill security-reviewer-unrealandychan

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Identifies and remediates OWASP Top 10 risks in codebases and configurations, helping teams ship safer software faster.

Core Features & Use Cases

  • OWASP Top 10 focused checks across source code, configuration files, and dependencies.
  • Structured findings with concrete remediation steps and references (references/owasp-top10.md).
  • Usage integrates into CI / PR workflows and allows targeted audits with flags like --stack, --scope, and --severity.

Quick Start

Use the skill by supplying the code or repository and invoking /security-reviewer with the desired flags to start the audit.

Frequently Asked Questions about security-reviewer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I identify OWASP Top 10 vulnerabilities in my source code?▼

You can identify OWASP Top 10 vulnerabilities by running a security audit that checks source code and configurations against an explicit checklist, outputting structured findings with concrete remediation steps and references.

Can I automate security reviews within my CI PR workflows?▼

Yes, you can automate security reviews within CI PR workflows by invoking the audit with targeted flags like --stack, --scope, and --severity to enforce secure coding standards on submitted changes.

Does this security auditing tool work with Next.js and Python stacks?▼

Yes, this security auditing tool works with Next.js, Python, Node.js, and generic stacks, applying OWASP-focused checks across diverse codebases to help teams ship safer software faster.

What is the best way to remediate OWASP risks found during a code review?▼

The best way to remediate OWASP risks found during a code review is to follow structured findings that provide actionable fixes and explicit references to the OWASP Top 10 documentation.

How do I run a targeted security audit on specific configuration files?▼

You run a targeted security audit on specific configuration files by invoking the reviewer with scope and severity flags to focus the OWASP Top 10 checks on the desired files and risk levels.

Related Skills

Explore More Software Engineering Skills→
HarriesHarries
1

review-security

Identify security risks in codebases and configurations during code reviews.

Community
Advanced
mcampbellrmcampbellr

gsd-code-review

Automate code review for bugs, security vulnerabilities, and quality issues.

Community
Advanced
spallempatispallempati

secure-coding-enforcement

Integrate SAST tools into CI/CD to block pull requests with high-severity findings.

Community
Advanced
brenordvbrenordv

security

Audit software systems for security vulnerabilities and regulatory compliance.

Community
Advanced