swe-team:security-review - OWASP Top 10 and secret detection review for PR diffs.
Performs OWASP Top 10 pattern checks and secret detection on a PR diff to produce a security verdict and report.
Tags
Updated: 2026-09-19Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Load full PR git diff
- Scan for hardcoded secrets
- Check OWASP Top 10 patterns
- Classify security issue severity
- Record security review event
- Emit security failure block event
Inputs
- Full git diff file
- Run metadata file
- Security check configuration
Outputs
- Verification event in verification.jsonl
- Security verdict state
- Security issues list
Requirements
- Whole-PR mode in swe-verifier-sem
- Enabled security config
- Available non-empty git diff
- jq command line tool
- grep command line tool
- git command line tool