How does this skill help with OWASP compliance?

It provides a structured checklist covering all 10 OWASP categories, ensuring your application addresses risks like Broken Access Control, Cryptographic Failures, and Injection.

What tools does it recommend for input validation?

The skill provides implementation examples using Zod for schema-based validation to ensure all incoming data is type-safe and properly sanitized.

Is this skill useful for mobile development?

While focused on web and API security, the principles of input validation, secret management, and secure communication (HTTPS) apply to mobile backends and cross-platform development.

Can it detect leaked secrets in my repository?

Yes, the skill includes specific detection patterns and grep commands designed to identify hardcoded passwords, API secrets, and tokens within your source files.

Does it support Web3 or financial system security?

Absolutely. It includes specialized checks for transaction atomicity, double-spending prevention, audit logging, and wallet signature verification.

Security Review & Vulnerability Audit

Name: Security Review & Vulnerability Audit
Author: tadokoro-ryusuke

bytadokoro-ryusuke

보안 및 테스팅

Performs comprehensive security audits and vulnerability checks based on OWASP standards and industry best practices.

소개

The security-review skill provides an automated framework for evaluating codebases against critical security threats, including the OWASP Top 10 vulnerabilities. It guides developers through essential checks for broken access control, injection risks, and cryptographic failures while offering concrete implementation patterns for input validation using Zod and secure secret management. Whether you are building a standard web application or a complex financial system, this skill ensures your code meets rigorous security standards through systematic review and best-practice enforcement.

주요 기능

Schema-based input validation patterns using Zod
Best-practice guidance for environment variable management
OWASP Top 10 compliance checking for web vulnerabilities
0 GitHub stars
Automated detection of hardcoded secrets and API keys
Specialized security checks for financial and Web3 systems

사용 사례

Conducting a pre-deployment security audit on new feature branches
Identifying and mitigating XSS or SQL injection risks in legacy code
Hardening authentication and authorization logic for financial applications

소개

주요 기능

Schema-based input validation patterns using Zod
Best-practice guidance for environment variable management
OWASP Top 10 compliance checking for web vulnerabilities
0 GitHub stars
Automated detection of hardcoded secrets and API keys
Specialized security checks for financial and Web3 systems

사용 사례

Conducting a pre-deployment security audit on new feature branches
Identifying and mitigating XSS or SQL injection risks in legacy code
Hardening authentication and authorization logic for financial applications