reviewing-security - Security Code Review for Vulnerability Detection
Reviews code for security vulnerabilities including OWASP Top 10 risks, authentication and authorization flaws, and dependency vulnerabilities.
Tags
Updated: 2026-02-15Capabilities
What this skill does
- Review code for security vulnerabilities
- Check for OWASP Top 10 risks
- Identify authentication flaws
- Identify authorization flaws
- Detect dependency vulnerabilities
- Check injection prevention
- Validate access control implementation
- Assess encryption implementation
- Evaluate security configurations
- Verify software data integrity
- Review security logging and monitoring
- Check SSRF protection
- Assess authentication mechanisms
- Check session management
- Verify least privilege principle
- Check privilege escalation prevention
- Evaluate token and credential management
- Detect known dependency vulnerabilities
- Check dependency version management
- Assess supply chain risks
Inputs
- Code files or directory for review
- Target codebase for security assessment
Outputs
- Security review report
- Vulnerability findings list
- Security recommendations
Requirements
- Requires codex CLI, claude CLI, or gemini CLI
- Runs in read-only/sandbox mode