skills.rest
VenTheZone
VenTheZoneCOMMUNITY
Explore all skills by this author →
GitHub

specialist-security-reviewer

Identify and remediate security vulnerabilities in codebases, configurations, and dependencies.

42|1|Updated Mar 24, 2026
Search Tags:#vulnerability#owasp#secrets-detection#security-review#code-audit#secure-coding#dependency-security
One-click install
npx skills add https://github.com/VenTheZone/pi-dots --skill specialist-security-reviewer
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: specialist-security-reviewer
Source: https://github.com/VenTheZone/pi-dots/tree/main/pi-dotfiles-specialist-skills/skills/specialist-security-reviewer
Command: npx skills add https://github.com/VenTheZone/pi-dots --skill specialist-security-reviewer

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Standalone specialist role for security-reviewer to identify and remediate vulnerabilities in code, configurations, and dependencies before release.

Core Features & Use Cases

  • Vulnerability detection across codebases (OWASP Top 10) and third-party dependencies
  • Secrets and sensitive data scanning using tools like git-secrets, trufflehog, npm audit
  • Comprehensive security review reporting with actionable remediation guidance

Quick Start

Provide the target project repository and let the agent run a full security review using the OWASP Top 10 checklist.

Frequently Asked Questions about specialist-security-reviewer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run an OWASP Top 10 security review on my codebase?▼

To run an OWASP Top 10 security review, provide your target project repository to the agent. It analyzes codebases, configurations, and dependencies to identify and remediate vulnerabilities before release.

What is the best way to detect hardcoded secrets and sensitive data in a project?▼

Detecting hardcoded secrets and sensitive data is handled by scanning your project repository using integrated tools like git-secrets and trufflehog. This process identifies exposed credentials within your codebase before release.

Can I check third-party dependencies for vulnerabilities during a code audit?▼

Yes, you can check third-party dependencies for vulnerabilities during a code audit. The analysis targets dependencies across web apps, APIs, and libraries using tools like npm audit to identify known flaws.

Does this security review provide actionable remediation guidance for detected flaws?▼

Yes, the security review provides actionable remediation guidance for detected flaws. It generates comprehensive standardized reporting that details vulnerabilities in code and configurations alongside steps to fix them.

What types of applications are supported for vulnerability detection and secure coding checks?▼

Vulnerability detection and secure coding checks support web apps, APIs, and libraries. The analysis targets codebases, configurations, and dependencies across these software project types to identify flaws.

Related Skills

Explore More Software Engineering Skills→
Cogni-AI-OUCogni-AI-OU
3

security-audit

Audit codebases for vulnerabilities, dependencies, secrets, and patch proposals.

Official
Advanced
CuriousLearnerCuriousLearner
27

auth-analyzer

Analyze authentication and authorization patterns for security vulnerabilities against OWASP Top 10 and NIST.

Community
Advanced
matteocervellimatteocervelli
25

security-scanner

Scan codebases for secrets, vulnerable dependencies, and insecure patterns.

Community
Advanced
rnavarychrnavarych
14

security-testing

Automate security testing with Snyk, Semgrep, Gitleaks, and OWASP ZAP in CI/CD pipelines.

Community
Advanced