skills.rest
disciplin-run-org
disciplin-run-orgOFFICIAL
Explore all skills by this author →
WebsiteGitHub

security-review

Execute security reviews of code repositories, configurations, and dependencies.

Updated Mar 23, 2026
Search Tags:#code review#security#vulnerability#configuration#dependency analysis#secrets detection
One-click install
npx skills add https://github.com/disciplin-run-org/jjstack --skill security-review-disciplin-run-org
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/disciplin-run-org/jjstack/tree/main/skills/security-review
Command: npx skills add https://github.com/disciplin-run-org/jjstack --skill security-review-disciplin-run-org

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill streamlines comprehensive security assessments of codebases, configurations, and dependencies, helping teams identify vulnerabilities before deployment.

Core Features & Use Cases

  • Multi-source methodology integration: Combines industry standards from Anthropic, Sentry, OWASP, and custom jjstack assessments.
  • Automated deep code analysis: Detects secrets, misconfigurations, insecure dependencies, and common vulnerability patterns across full repositories.
  • Use Case: Conduct a pre-deployment security scan of a web application with detailed reporting on identified risks and mitigation recommendations.

Quick Start

Run the security review on your project directory to get a comprehensive vulnerability report.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a comprehensive security vulnerability review on my codebase?▼

Run a full-spectrum security review to execute static analysis, secret detection, and dependency checks across your codebase, configurations, and infrastructure to identify vulnerabilities before deployment.

What security standards and frameworks are used for code vulnerability analysis?▼

Code vulnerability analysis uses OWASP Top 10:2025, industry standards from Anthropic and Sentry, and custom MCP assessments to ensure comprehensive compliance and risk mitigation.

Can I detect hardcoded secrets and insecure dependencies during a pre-deployment security scan?▼

Yes, automated deep code analysis detects secrets, insecure dependencies, misconfigurations, and common vulnerability patterns across full repositories during a pre-deployment security scan.

Does the security audit work with infrastructure configurations and dependency files?▼

Yes, the security audit executes comprehensive static analysis on code repositories, infrastructure configurations, and dependencies to detect misconfigurations and address vulnerabilities.

What is the best way to identify misconfigurations and common vulnerability patterns in a project?▼

The best way to identify misconfigurations is running an automated deep code analysis that combines static analysis and secret detection to pinpoint common vulnerability patterns across your project.

Related Skills

Explore More Software Engineering Skills→
simplerick0simplerick0

sast

Scan source code for security flaws and produce markdown findings.

Community
Advanced
unju-aiunju-ai

security-scan

Scans Claude Code configurations for vulnerabilities, misconfigurations, and injection risks.

Official
Advanced
AgentSecOpsAgentSecOps
183

api-spectral

Lint OpenAPI/AsyncAPI definitions with Spectral to enforce security and governance rules.

Official
Advanced
icartshicartsh
4

code-analyze

Analyze .NET solutions for code quality, security, and dependency issues.

Community
Advanced