Systematically reviews code for security vulnerabilities using OWASP Top 10 standards and secure coding patterns.
The Secure Code Review skill transforms Claude into a security-focused auditor capable of identifying critical vulnerabilities before they reach production. By leveraging industry standards like the OWASP Top 10 and CWE Top 25, this skill provides a rigorous framework for evaluating input validation, authentication logic, cryptographic implementations, and error handling. It is designed for developers and security leads who need to maintain high security standards during pull request reviews, legacy code audits, or the implementation of sensitive features involving PII and financial data.
主な機能
01Detailed analysis of input validation and output encoding patterns
02Actionable remediation guidance with 'Before and After' code examples
03OWASP Top 10 (2021) vulnerability mapping and identification
04Authentication and authorization logic verification
05Cryptographic audit for encryption standards and key management
065 GitHub stars
ユースケース
01Establishing secure coding best practices and guardrails for engineering teams
02Performing a security audit on third-party API integrations
03Reviewing Pull Requests that touch authentication, payments, or data access
