security-reviewer

Identify and remediate OWASP Top 10 risks in code and configurations.

1|Updated Apr 22, 2026

Search Tags:#security #owasp #auditing #vulnerabilities #code-review #hardening

Ready to run

npx skills add https://github.com/unrealandychan/AgentFoundry --skill security-reviewer-unrealandychan

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-reviewer
Source: https://github.com/unrealandychan/AgentFoundry/tree/main/skills/security-reviewer
Command: npx skills add https://github.com/unrealandychan/AgentFoundry --skill security-reviewer-unrealandychan

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Identifies and remediates OWASP Top 10 risks in codebases and configurations, helping teams ship safer software faster.

Core Features & Use Cases

OWASP Top 10 focused checks across source code, configuration files, and dependencies.
Structured findings with concrete remediation steps and references (references/owasp-top10.md).
Usage integrates into CI / PR workflows and allows targeted audits with flags like --stack, --scope, and --severity.

Quick Start

Use the skill by supplying the code or repository and invoking /security-reviewer with the desired flags to start the audit.

Frequently Asked Questions about security-reviewer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I identify OWASP Top 10 vulnerabilities in my source code?▼

You can identify OWASP Top 10 vulnerabilities by running a security audit that checks source code and configurations against an explicit checklist, outputting structured findings with concrete remediation steps and references.

Can I automate security reviews within my CI PR workflows?▼

Yes, you can automate security reviews within CI PR workflows by invoking the audit with targeted flags like --stack, --scope, and --severity to enforce secure coding standards on submitted changes.

Does this security auditing tool work with Next.js and Python stacks?▼

Yes, this security auditing tool works with Next.js, Python, Node.js, and generic stacks, applying OWASP-focused checks across diverse codebases to help teams ship safer software faster.

What is the best way to remediate OWASP risks found during a code review?▼

The best way to remediate OWASP risks found during a code review is to follow structured findings that provide actionable fixes and explicit references to the OWASP Top 10 documentation.

How do I run a targeted security audit on specific configuration files?▼

You run a targeted security audit on specific configuration files by invoking the reviewer with scope and severity flags to focus the OWASP Top 10 checks on the desired files and risk levels.