security-reviewer

Identify and report security weaknesses in code and configurations.

Updated Mar 14, 2026
One-click install
npx skills add https://github.com/Vivekmano27/agent-orchestrator --skill security-reviewer-vivekmano27
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-reviewer
Source: https://github.com/Vivekmano27/agent-orchestrator/tree/main/plugins/project-orchestrator/skills/security-reviewer
Command: npx skills add https://github.com/Vivekmano27/agent-orchestrator --skill security-reviewer-vivekmano27

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Helps teams quickly identify and report security weaknesses in code, configurations, and dependencies before deployment, reducing risk and remediation cost.

Core Features & Use Cases

  • OWASP Top 10–aligned security review of endpoints, authentication, data handling, and configuration.
  • Dependency and configuration checks with actionable remediation guidance and a severity-rated report.
  • Suitable for CI/CD gates, pre-release security audits, and security-focused code reviews across web and API projects.

Quick Start

Run a security review on your project to generate a severity-rated report.

Frequently Asked Questions about security-reviewer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate an OWASP Top 10 security review for my code?

An OWASP Top 10 security review identifies and reports weaknesses in endpoints, authentication, and data handling by applying an explicit A01-A10 checklist during code review to reduce deployment risk.

Can I use a security review to check dependencies and configurations before deployment?

Security review checks dependencies and configurations to uncover flaws, providing actionable remediation guidance and a severity-rated report to reduce pre-release remediation costs.

How does a pre-release security audit handle endpoint authorization and data handling?

A pre-release security audit evaluates endpoint authorization and data handling by applying an OWASP-aligned checklist, generating an evidence-backed findings document to mitigate deployment risk.

What is the best way to generate a severity-rated report for CI/CD pipeline security gates?

Generating a severity-rated report for CI/CD gates involves running security reviews on web apps and APIs, exporting structured findings documents to block risky deployments automatically.

Does this security review approach work for both web apps and APIs?

Security review applies across web apps and APIs, handling endpoint authorization, data handling, dependencies, and misconfigurations during code review and pre-release checks.

What limitations exist when automating code review for vulnerability reporting?

Automated vulnerability reporting focuses on identifying code and configuration weaknesses using an OWASP Top 10 checklist, requiring evidence-backed findings to accurately rate severity and reduce risk.