security-review

Identify exploitable security vulnerabilities in code during code reviews.

35|5|Updated Jan 1, 2026
One-click install
npx skills add https://github.com/gricha/perry --skill security-review-gricha
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/gricha/perry/tree/main/.agents/skills/security-review
Command: npx skills add https://github.com/gricha/perry --skill security-review-gricha

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Security code review tooling to identify exploitable vulnerabilities in code, prioritizing high-confidence findings and providing clear guidance for remediation.

Core Features & Use Cases

  • Systematic vulnerability identification across common risk areas (input handling, authentication, authorization, data protection, configuration).
  • Confidence-based reporting with explicit high-confidence findings suitable for remediation prioritization.
  • Real-world use: during a code review, surface critical vulnerabilities and suggested fixes.

Quick Start

Review the provided code snippet and generate a high-confidence security report with actionable findings.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit code for exploitable security vulnerabilities during a code review?▼

To audit code for security vulnerabilities, trace data flow across input handling, authentication, authorization, data protection, and configuration risks to surface high-confidence findings confirmed against established security guidance.

What is the best way to check my codebase for OWASP vulnerabilities like broken authorization?▼

Checking for OWASP vulnerabilities involves systematically assessing input handling, authentication, authorization, data protection, and configuration risks to identify exploitable flaws and generate a high-confidence security report.

Can I use an automated security review to trace data flow and assess upstream validation?▼

Yes, a systematic security review researches the codebase to trace data flow, assess upstream validation, and confirm findings against established security guidance, prioritizing high-confidence vulnerabilities for remediation.

Does this vulnerability identification approach work for assessing data protection and configuration risks?▼

Yes, vulnerability identification systematically assesses data protection and configuration risks alongside input handling, authentication, and authorization to surface exploitable security flaws and provide clear remediation guidance.

How do I generate a high-confidence security report with actionable findings for my code?▼

Generate a high-confidence security report by reviewing the provided code snippet, tracing data flow, assessing upstream validation, and confirming exploitable vulnerabilities against established security guidance to prioritize remediation.