Does it support custom detection patterns?

While it comes with built-in patterns for common vulnerabilities, you can customize the scan by ignoring specific files via .securityignore or providing specific focus areas.

Can it automatically fix the vulnerabilities it finds?

Yes, when used in conjunction with coding agents like ndf:corder, it can suggest and apply secure code patterns to fix detected issues.

Does it scan for hardcoded credentials?

Yes, it includes a robust secret detection engine that identifies AWS keys, GitHub tokens, database URLs, and other sensitive credentials.

How do I trigger a security scan manually?

You can trigger a scan by using the /security-scan or /owasp-check commands, or by simply asking Claude to 'check for vulnerabilities'.

What security standards does this skill follow?

The skill is primarily based on the OWASP Top 10 (2021) framework, covering major risks like Injection, Broken Access Control, and SSRF.

Security Reviewer

Name: Security Reviewer
Author: takemi-ohama

bytakemi-ohama

0•

Security & Testing

Performs automated security audits based on OWASP Top 10 standards to detect and remediate vulnerabilities in your codebase.

The Security Reviewer skill provides a comprehensive security layer for your development workflow within Claude Code. By aligning with the OWASP Top 10 (2021) framework, it systematically analyzes code for critical risks such as broken access control, injection vulnerabilities, and cryptographic failures. It features advanced pattern matching for secret detection, real-time scanning for common exploits like XSS and SQL injection, and provides actionable remediation guides. Designed to work alongside other AI agents, it can automatically trigger fixes for detected issues and implement pre-commit hooks to prevent sensitive data leaks, ensuring your application remains secure from development to deployment.

Key Features

01Comprehensive OWASP Top 10 (2021) compliance auditing

02Automated secret and credential detection for cloud providers and databases

030 GitHub stars

04Pre-commit security hooks to prevent accidental exposure of sensitive keys

05Real-time vulnerability scanning for SQLi, XSS, and Path Traversal

06Integration with coding agents for automated vulnerability remediation

Use Cases

01Automating security compliance checks within CI/CD pipelines and code review workflows

02Identifying and patching security vulnerabilities in legacy codebases or third-party libraries

03Auditing authentication and authorization logic during the development of new features

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add takemi-ohama/ai-plugins security-review

For use in Claude.ai and ChatGPT

Download Skill