security-review

To automate an OWASP Top 10 vulnerability scan, this Skill evaluates your codebase to detect common security flaws and generates a markdown report containing identified issues, severities, and remediation guidance.

Detecting hardcoded secrets and API keys before deployment is handled by scanning your repository for credentials to prevent leakage, outputting a detailed security report with locations and remediation steps.

Dependency security scanning works by evaluating your project's dependencies against known CVEs and outdated components, producing a markdown report that flags vulnerable libraries and provides actionable fixes.

You can perform a security audit across multiple languages and environments, as the Skill evaluates repositories undergoing development, review, or pre-deployment security sprints for input validation and authentication controls.

The security review does check input validation and authentication controls by evaluating input sanitization, authorization checks, and session security, then documenting any identified vulnerabilities in a markdown report.

The markdown security report includes identified security issues, their severities, exact locations in the code, relevant CVEs for dependencies, and specific remediation guidance to resolve the vulnerabilities.