skills.rest
FrekiManagarm
FrekiManagarmCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

source-command-sparc-security-review

Perform static and dynamic code audits to flag security vulnerabilities.

Updated May 11, 2026
Search Tags:#static analysis#secure coding#security review#code audit#dynamic analysis
One-click install
npx skills add https://github.com/FrekiManagarm/pav-d-mill --skill source-command-sparc-security-review
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: source-command-sparc-security-review
Source: https://github.com/FrekiManagarm/pav-d-mill/tree/main/.agents/skills/source-command-sparc-security-review
Command: npx skills add https://github.com/FrekiManagarm/pav-d-mill --skill source-command-sparc-security-review

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill addresses the challenge of maintaining secure code practices by providing a platform for static and dynamic audits.

Core Features & Use Cases

  • Static and Dynamic Audits: Performs both static and dynamic code audits to ensure secure coding practices.
  • Flagging Secrets and Vulnerabilities: Identifies and flags secrets, poor modular boundaries, and oversized files.
  • Mitigation Recommendations: Suggests mitigations or refactors to reduce risk.
  • File Scanning: Flags files over 500 lines or with direct environment coupling.
  • Sub-audit Assignment: Utilizes new_task to assign sub-audits.
  • Finalization of Findings: Completes findings with attempt_completion.

Quick Start

Run the source-command-sparc-security-review skill to initiate a security audit on your codebase.

Frequently Asked Questions about source-command-sparc-security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a security code audit to identify vulnerabilities in my software project?▼

A security code audit using this Skill performs static and dynamic analysis to identify security vulnerabilities, flag exposed secrets, and detect poor modular boundaries, providing mitigation recommendations to reduce risk in your software development workflow.

What is the difference between static and dynamic analysis for secure coding?▼

Static analysis examines source code without executing it to flag oversized files and poor boundaries, while dynamic analysis evaluates running code behavior to identify security vulnerabilities during software execution.

Does this code audit tool flag hardcoded secrets and oversized files?▼

Yes, the code audit flags hardcoded secrets and identifies files over 500 lines or with direct environment coupling, recommending refactors to enforce secure coding practices and reduce potential attack surfaces.

How do I scan my codebase for direct environment coupling and security risks?▼

You can scan for direct environment coupling by running this Skill, which automatically flags affected files, assigns sub-audits to evaluate specific security risks, and finalizes findings with recommended refactors.

Can I use this security review tool for automated vulnerability scanning in development workflows?▼

Yes, this Skill is designed for security auditing within software development workflows, utilizing automated tools for code analysis and vulnerability scanning to maintain secure code practices.

Related Skills

Explore More Software Engineering Skills→
TECHKNOWMAD-LABSTECHKNOWMAD-LABS

security-audit

Scan code repositories for vulnerabilities and leaked secrets using static analysis tools.

Official
Advanced
TDMoralesTDMorales

refactoring-techniques

Plan and apply behavior-preserving refactorings to Python and TypeScript codebases.

Community
Advanced
JFrangelJFrangel

security-guard

Detects and remediates security vulnerabilities in code, infrastructure, and architecture using OWASP and DevSecOps standards for pre-production environments.

Community
Advanced
Ed1s0nZEd1s0nZ
5.6k

mobile-app-security-testing

Analyze Android and iOS applications for security vulnerabilities using static and dynamic techniques.

Community
Advanced