security-reviewer

Overview: The security-reviewer skill is designed for security analysts and engineers to conduct thorough security audits, review code for vulnerabilities, and analyze infrastructure security. It specializes in SAST scans, penetration testing, and DevSecOps practices, providing actionable reports with severity ratings and remediation guidance.

Key Features:

• Conduct SAST scans and penetration testing
• Analyze infrastructure security
• Identify vulnerabilities through code review
• Produce actionable reports with severity ratings and remediation guidance

How It Works: The skill follows a core workflow that includes scope definition, automated scans, manual review, active testing, categorization, and reporting. It also provides a reference guide with detailed guidance based on context.

Use Cases:

• Conducting security audits
• Reviewing code for vulnerabilities
• Analyzing infrastructure security
• Implementing DevSecOps practices
• Conducting penetration testing and reconnaissance