How does this skill help with OWASP compliance?

It provides a structured checklist covering all 10 OWASP categories, ensuring your application addresses risks like Broken Access Control, Cryptographic Failures, and Injection.

What tools does it recommend for input validation?

The skill provides implementation examples using Zod for schema-based validation to ensure all incoming data is type-safe and properly sanitized.

Is this skill useful for mobile development?

While focused on web and API security, the principles of input validation, secret management, and secure communication (HTTPS) apply to mobile backends and cross-platform development.

Can it detect leaked secrets in my repository?

Yes, the skill includes specific detection patterns and grep commands designed to identify hardcoded passwords, API secrets, and tokens within your source files.

Does it support Web3 or financial system security?

Absolutely. It includes specialized checks for transaction atomicity, double-spending prevention, audit logging, and wallet signature verification.

Security Review & Vulnerability Audit

Name: Security Review & Vulnerability Audit
Author: tadokoro-ryusuke

bytadokoro-ryusuke

0•

Seguridad y Pruebas

Performs comprehensive security audits and vulnerability checks based on OWASP standards and industry best practices.

The security-review skill provides an automated framework for evaluating codebases against critical security threats, including the OWASP Top 10 vulnerabilities. It guides developers through essential checks for broken access control, injection risks, and cryptographic failures while offering concrete implementation patterns for input validation using Zod and secure secret management. Whether you are building a standard web application or a complex financial system, this skill ensures your code meets rigorous security standards through systematic review and best-practice enforcement.

Características Principales

01Schema-based input validation patterns using Zod

02Best-practice guidance for environment variable management

03OWASP Top 10 compliance checking for web vulnerabilities

040 GitHub stars

05Automated detection of hardcoded secrets and API keys

06Specialized security checks for financial and Web3 systems

Casos de Uso

01Conducting a pre-deployment security audit on new feature branches

02Identifying and mitigating XSS or SQL injection risks in legacy code

03Hardening authentication and authorization logic for financial applications

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add tadokoro-ryusuke/cc-plugins security-review

For use in Claude.ai and ChatGPT

Download Skill