skills.rest
MohamedSayedK
MohamedSayedKCOMMUNITY
Explore all skills by this author →
GitHub

security-review

Reviews a diff for OWASP and STRIDE vulnerabilities and returns a severity-ranked verdict.

Updated Jun 2, 2026
Search Tags:#diff analysis#code review#vulnerability#owasp#threat modeling#security review#stride
One-click install
npx skills add https://github.com/MohamedSayedK/omnigrid --skill security-review-mohamedsayedk
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/MohamedSayedK/omnigrid/tree/main/assets/core/skills/security-review
Command: npx skills add https://github.com/MohamedSayedK/omnigrid --skill security-review-mohamedsayedk

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Security-relevant changes often slip through general code review because reviewers lack a structured vulnerability lens. This Skill runs a dedicated, read-only security pass over a diff so authentication, input handling, cryptography, and secrets issues are caught before merge. ## Core Features & Use Cases - OWASP / STRIDE analysis: Walks a security checklist plus the OWASP Top-10 and STRIDE threat model against the resolved diff. - Severity-ranked verdict: Returns APPROVED, CHANGES REQUESTED, or COMMENT with file:line findings and concrete mitigations. - Standalone or orchestrated activation: Runs directly via /security-review as a spawned read-only security-reviewer sub-agent, or as part of an Orchestrator-driven review flow. - Use Case: Before merging a branch that adds a new API endpoint handling user input, run /security-review main...HEAD to get a ranked list of injection, authorization, and data-exposure findings with fixes. ## Quick Start Ask the agent to run /security-review on your current working diff or on a branch range such as main...HEAD to receive a severity-ranked security verdict.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a security review on a git diff?▼

Invoke /security-review with no arguments to review the uncommitted working diff, or pass a range like main...HEAD to review a branch against its base. The skill resolves the diff and returns a severity-ranked verdict with file:line findings.

What vulnerabilities does an OWASP and STRIDE review catch?▼

The review walks a security checklist plus the OWASP Top-10 and STRIDE lens, covering issues like injection, broken authentication, authorization flaws, exposed secrets, and cryptographic weaknesses. Findings are ranked by severity with suggested mitigations.

When should I use security-review instead of a general code review?▼

Use it when a diff touches authentication, authorization, user input, API endpoints, data storage, cryptography, secrets, or third-party integrations. The general code-review pass covers baseline security and defers this deeper pass to security-review.

Does security-review modify my code?▼

No. It runs as a read-only security-reviewer sub-agent that only analyzes the diff and reports findings. It returns a verdict of APPROVED, CHANGES REQUESTED, or COMMENT with mitigations, but never edits files.

Can security-review run without an orchestrator?▼

Yes. The skill is self-sufficient and can be invoked directly by the user via /security-review. It spawns its security-reviewer role as a standalone sub-agent and produces the same result as an orchestrator-driven run.

Related Skills

Explore More Software Engineering Skills→
mhertmhert

code-review

Analyze git diffs to generate severity-classified code review reports.

Community
Advanced
ablyably
5

code-review-all

Coordinate parallel subagent reviews and synthesize severity-grouped findings into one verdict.

Official
Advanced
9thLevelSoftware9thLevelSoftware
1

review-evaluators

Run multi-pass code and UI/UX evaluations with Python scripts.

Community
Advanced
InnerScopeHearingInnerScopeHearing

sast-configuration

Automate SAST tool setup, custom rule creation, and CI/CD integration.

Official
Advanced