skills.rest
scanady
scanadyCOMMUNITY
Explore all skills by this author →
GitHub

tech-security-reviewer

Identify, classify, and remediate vulnerabilities across code, pipelines, and cloud infrastructure.

Updated Jan 28, 2026
Search Tags:#security#vulnerability#remediation#reporting#SAST#cvss#penetration-testing
One-click install
npx skills add https://github.com/scanady/nexus-agents --skill tech-security-reviewer
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: tech-security-reviewer
Source: https://github.com/scanady/nexus-agents/tree/main/skills/tech-security-reviewer
Command: npx skills add https://github.com/scanady/nexus-agents --skill tech-security-reviewer

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Security teams and developers struggle to consistently identify, rate, and remediate vulnerabilities across code, infrastructure, and pipelines. This skill provides a repeatable, evidence-backed process to produce clear reports with prioritized findings and remediation guidance.

Core Features & Use Cases

  • Scope mapping of attack surfaces and critical paths to focus audits.
  • Automated scanning (SAST, secret scanning, dependency checks) followed by manual review of auth, input handling, and secure design.
  • CVSS-based severity rating and prioritized remediation guidance for each finding.
  • Structured deliverables including executive summary, findings table, and detailed findings to support DevSecOps workflows.
  • Use cases: pre-release security assurance, cloud infrastructure audits, IaC reviews, and penetration testing engagements.

Quick Start

Provide the target project and I will start a security review with prioritized findings.

Frequently Asked Questions about tech-security-reviewer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I prioritize security vulnerabilities found during code review and SAST scans?▼

Security vulnerabilities are prioritized using CVSS-based severity ratings to produce structured reports with targeted remediation guidance for each finding.

What is the best way to structure a penetration testing report for DevSecOps workflows?▼

A structured penetration testing report for DevSecOps workflows includes an executive summary, a findings table, and detailed findings with CVSS ratings and remediation steps to support actionable security assurance.

Can I use this security review process for cloud infrastructure and IaC audits?▼

Yes, you can use this security review process for cloud infrastructure and IaC audits to map attack surfaces, run automated dependency checks, and manually review authentication and secure design principles.

How do I rate vulnerability severity using CVSS scores for pre-release security assurance?▼

Vulnerability severity is rated using CVSS scores to systematically classify findings across code and pipelines, ensuring pre-release security assurance targets the most critical attack surface paths first.

Does automated secret scanning replace manual security review for authentication and authorization checks?▼

No, automated secret scanning and SAST do not replace manual review; the security process requires automated scanning followed by manual verification of authentication, authorization, and input handling.

Related Skills

Explore More Software Engineering Skills→
JosiahSiegelJosiahSiegel
51

defender-for-devops

Integrate Microsoft Defender for DevOps into Azure Pipelines for automated security scanning.

Community
Advanced
swannysecswannysec
2

security-vuln-analyzer

Orchestrates parallel security agents to validate vulnerabilities and generate remediation plans.

Community
Advanced
tuandzungtuandzung

security-review

Scan codebases for OWASP Top 10 vulnerabilities and hardcoded secrets.

Community
Advanced
zangxin75zangxin75

security-reviewer

Conduct security audits and code vulnerability reviews with SAST scans.

Community
Advanced