security-review

Identify security weaknesses and generate prioritized reports with remediation guidance.

6|1|Updated Apr 16, 2026
One-click install
npx skills add https://github.com/Goblin1024/oh-my-kimi --skill security-review-goblin1024
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/Goblin1024/oh-my-kimi/tree/main/skills/security-review
Command: npx skills add https://github.com/Goblin1024/oh-my-kimi --skill security-review-goblin1024

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Security reviews are time-consuming and error-prone; this Skill provides an automated, structured approach to audit code for OWASP Top 10 issues, secrets, and insecure patterns.

Core Features & Use Cases

  • OWASP Top 10 scan
  • Secrets detection
  • Input validation review
  • Authentication/Authorization assessment
  • Dependency security checks
  • Remediation guidance and reporting
  • Use Case: Applies to new code changes, deployments, and dependency updates to catch security gaps before release.

Quick Start

Initiate a full security review of your codebase and receive a prioritized findings report.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate a code security review for OWASP Top 10 vulnerabilities?▼

A codebase security audit identifies security weaknesses across the OWASP Top 10, secrets exposure, and dependency vulnerabilities. It outputs a prioritized security report with file-level findings, remediation guidance, and references to relevant CVE sources.

How do I check my project dependencies for known security vulnerabilities?▼

Checking dependencies for security vulnerabilities involves analyzing project libraries against known CVE sources. The review generates a prioritized findings report detailing vulnerable dependencies and providing actionable remediation guidance.

Can I scan my codebase for exposed secrets and authentication weaknesses?▼

Yes, scanning a codebase can detect exposed secrets alongside authentication and authorization weaknesses. The automated review assesses these security gaps across new code changes and deployment workflows, outputting file-level findings for remediation.

What is the best way to catch security gaps before a software release?▼

The best way to catch security gaps before release is applying an automated security review to new code changes and dependency updates. This provides a structured audit of insecure patterns, input validation gaps, and deployment vulnerabilities.

Does automated security auditing work for new code changes and deployment workflows?▼

Automated security auditing works effectively for new code changes, dependency updates, and deployment workflows across typical software projects. It identifies input validation gaps and authentication weaknesses, delivering a prioritized security report.