Security Code Review

AI-powered security review of source code using OWASP Top 10, CWE/SANS Top 25, and OWASP WSTG patterns. Supports file review, commit review, and full codebase scan modes across all major languages.

When to Use This Skill

• Reviewing source code files or directories for security vulnerabilities
• Reviewing one or more git commits for security-relevant changes
• Scanning an entire codebase for OWASP Top 10 / CWE/SANS Top 25 issues
• Performing a security review pass before submitting a pull request

Workflow

Step 1: Determine Scope

Choose what to review (in priority order):