Does it provide severity ratings for findings?

Yes, all identified security findings are categorized with severity ratings to help developers prioritize the most critical fixes first.

Can it scan my project's dependencies?

Yes, it can analyze your project's manifest files against known vulnerability databases to find and report insecure packages.

When should I use the Security Agent skill?

Use it whenever you need a security audit, a security-focused code review, or when you are concerned about the security implications of a new code change.

Does it suggest how to fix security issues?

Yes, the skill provides a structured report that includes specific remediation guidance and code examples for every identified vulnerability.

What vulnerabilities can this skill detect?

It detects common security risks including SQL injection, cross-site scripting (XSS), authentication flaws, and insecure third-party dependencies.

Security Code Review Agent

Name: Security Code Review Agent
Author: BbgnsurfTech

byBbgnsurfTech

•

安全与测试

Conducts comprehensive security audits and vulnerability assessments to identify risks like SQL injection, XSS, and insecure dependencies.

关于

The Security Code Review Agent skill empowers Claude to function as a professional security consultant by analyzing application code for critical vulnerabilities. By leveraging the security-agent plugin, it identifies flaws such as cross-site scripting (XSS), authentication weaknesses, and vulnerable third-party dependencies, providing structured reports with severity ratings and actionable remediation guidance to improve the overall security posture of software projects.

主要功能

Automated vulnerability detection for SQL injection and XSS
3 GitHub stars
Context-aware remediation suggestions for vulnerable code
Comprehensive auditing of authentication and authorization flows
Dependency scanning against known CVE databases
Structured security reports with severity classifications

使用场景

Auditing existing codebases for legacy security vulnerabilities
Performing a security-focused code review before merging a pull request
Scanning project dependencies for known security risks and outdated packages

关于

主要功能

Automated vulnerability detection for SQL injection and XSS
3 GitHub stars
Context-aware remediation suggestions for vulnerable code
Comprehensive auditing of authentication and authorization flows
Dependency scanning against known CVE databases
Structured security reports with severity classifications

使用场景

Auditing existing codebases for legacy security vulnerabilities
Performing a security-focused code review before merging a pull request
Scanning project dependencies for known security risks and outdated packages