source-security-review

Analyze source code folders for vulnerabilities and generate prioritized reports.

2|Updated Feb 13, 2026
One-click install
npx skills add https://github.com/keturk/datrix --skill source-security-review
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: source-security-review
Source: https://github.com/keturk/datrix/tree/main/claude-config/.claude/skills/source-security-review
Command: npx skills add https://github.com/keturk/datrix --skill source-security-review

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides a thorough security review of your source code, identifying vulnerabilities and providing actionable recommendations to enhance your codebase's security.

Core Features & Use Cases

  • Source Code Security Review: Analyze your source code for common vulnerabilities, such as injection, auth, crypto, and sensitive data exposure.
  • Customizable Scope: Review a specific folder or directory tree, with optional scope notes for targeted analysis.
  • Prioritized Report: Generate a focused vulnerability report with prioritized actions and recommendations.

Quick Start

Run the source-security-review skill on your codebase, specifying the target folder path.

Frequently Asked Questions about source-security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I conduct a static code security review on a specific folder?

A static code security review analyzes your source code directory tree to identify vulnerabilities like injection, auth flaws, and sensitive data exposure, generating a prioritized report with actionable recommendations.

What types of vulnerabilities can a source code security audit detect?

A source code security audit detects common vulnerabilities including injection flaws, authentication issues, cryptographic weaknesses, and sensitive data exposure by performing whole-tree static analysis across the specified codebase.

Can I customize the scope of a static code review to target specific directories?

Yes, you can customize the scope of a static code review by specifying a target codebase folder path and providing optional scope notes to guide a targeted vulnerability analysis of that directory tree.

What is the best way to prioritize vulnerabilities found during a code security audit?

The best way to prioritize vulnerabilities found during a code security audit is to use a generated report that adapts whole-tree static analysis methodology to deliver prioritized findings and detailed recommendations.

Do I need any external dependencies to run a vulnerability analysis on my source code?

No external dependencies are required to run a vulnerability analysis on your source code, as the review operates directly on the specified codebase folder using built-in scripts and reference components.

How does whole-tree static analysis improve source code vulnerability reporting?

Whole-tree static analysis improves vulnerability reporting by adapting comprehensive security review methodologies to scan the entire codebase directory, ensuring deeper detection of vulnerabilities and delivering a focused, prioritized report.