security-reviewer

Name: security-reviewer
Availability: InStock
Author: zangxin75

Conduct security audits and code vulnerability reviews with SAST scans.

Updated Mar 1, 2026

Search Tags:#code review #security #vulnerability #audit #DevSecOps #SAST #penetration test

Ready to run

npx skills add https://github.com/zangxin75/openclaw-skills --skill security-reviewer-zangxin75

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-reviewer
Source: https://github.com/zangxin75/openclaw-skills/tree/main/pentest
Command: npx skills add https://github.com/zangxin75/openclaw-skills --skill security-reviewer-zangxin75

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) and scripts (resource) components.

What problem does it solve?

This Skill helps identify and analyze security vulnerabilities in code and infrastructure, ensuring robust protection against cyber threats.

Core Features & Use Cases

Code Audits: Scans source code for common vulnerabilities like SQL injection, XSS, and insecure configurations.
Infrastructure Security: Reviews cloud and container configurations for security misconfigurations.
Penetration Testing Support: Provides guidance and tools for simulating attacks to uncover weaknesses.
Use Case: A development team is preparing for a major release and needs to ensure their new features are secure. They invoke this Skill to perform a comprehensive security audit of the codebase and deployment configurations.

Quick Start

Use the security-reviewer skill to perform a vulnerability scan on the current project directory.

Frequently Asked Questions about security-reviewer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I run a security audit on my source code to find vulnerabilities?▼

To run a security audit, invoke the skill on your project directory to scan source code for vulnerabilities like SQL injection and XSS. It analyzes your codebase and produces actionable reports with severity ratings and remediation guidance.

Can I review cloud and container configurations for security misconfigurations?▼

Yes, you can review cloud and container configurations for security misconfigurations. The skill analyzes your infrastructure security settings and provides hardening guidance to correct any identified deployment weaknesses.

What is SAST and how does it work for vulnerability detection?▼

SAST, or Static Application Security Testing, detects vulnerabilities by analyzing source code without executing it. The skill invokes SAST scans to identify insecure patterns, providing a baseline audit for common code-level security flaws.

Does this skill support penetration testing for simulating attacks?▼

Yes, this skill provides penetration testing support by offering guidance and tools for simulating attacks. It helps uncover infrastructure weaknesses through active testing, complementing static code review and SAST scans.

What is the best way to integrate DevSecOps practices into a major release?▼

The best way to integrate DevSecOps practices is to perform a comprehensive security audit before deployment. The skill reviews new features, runs SAST scans, and checks configurations to ensure your codebase is secure for release.

How do I get remediation guidance after a code review finds vulnerabilities?▼

To get remediation guidance after a code review, review the generated actionable reports. The skill automatically assigns severity ratings to identified vulnerabilities and provides specific steps to fix the security flaws.