code-review-security

SKILL.md

Code Review Security

When to Use

Activate this skill when:

Reviewing pull requests for security vulnerabilities

Auditing authentication or authorization code changes

Reviewing code that handles user input, file uploads, or external data

Checking for OWASP Top 10 vulnerabilities in new features

Validating that secrets are not committed to the repository

Scanning dependencies for known vulnerabilities

Reviewing API endpoints that expose sensitive data

Output: Write findings to security-review.md with severity, file:line, description, and recommendations.