security

Identify OWASP Top 10 security vulnerabilities in code and configurations.

8|1|Updated Nov 8, 2025

Search Tags:#automation #best practices #OWASP #security #vulnerability #review

Ready to run

npx skills add https://github.com/wutongci/agentdemo --skill security-wutongci

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security
Source: https://github.com/wutongci/agentdemo/tree/main/backend/skills-package/skills/security
Command: npx skills add https://github.com/wutongci/agentdemo --skill security-wutongci

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps teams automatically detect common security vulnerabilities and apply best practices to reduce risk and simplify compliance.

Core Features & Use Cases

Vulnerability detection: Identify common weaknesses aligned with OWASP Top 10 (injection, broken authentication, sensitive data exposure, etc.) in code and configurations.
Remediation guidance: Provide concrete steps to fix identified issues and improve security posture.
Review automation: Integrate into code reviews to surface risks early and drive secure-by-default behavior.

Quick Start

Please run a security review on the current project and list actionable fixes for OWASP Top 10 risks.

Frequently Asked Questions about security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I identify OWASP Top 10 vulnerabilities in my code during review?▼

Security reviews automatically detect OWASP Top 10 risks like injection, broken authentication, and sensitive data exposure across multiple languages. The Skill surfaces these vulnerabilities during code review and provides concrete remediation steps aligned with secure coding patterns.

What secure coding patterns does a security review enforce?▼

Security reviews enforce patterns including parameterized queries to prevent injection, bcrypt for password handling, TLS for transport security, and multi-factor authentication (MFA) for access control. Each pattern includes actionable fix guidance specific to your codebase.

Can I integrate security vulnerability detection into my code review workflow?▼

Yes. Security reviews integrate directly into code review processes to surface risks early and drive secure-by-default behavior. This automation detects vulnerabilities across configurations and code, reducing manual review burden.

How do I get actionable remediation steps for security issues?▼

After identifying vulnerabilities, the Skill provides concrete remediation guidance tailored to your language and framework, reducing compliance effort. Each fix includes the secure pattern needed and specific implementation steps.

Does security review work with multiple programming languages?▼

Yes. Security vulnerability detection and remediation guidance work across multiple languages, applying the same OWASP Top 10 framework and secure coding best practices consistently throughout your codebase.

What's the difference between automated security review and manual code inspection?▼

Automated security reviews detect common weaknesses consistently and early in development, while capturing institutional knowledge of secure patterns. Manual inspection complements this by addressing context-specific risks automation cannot identify.