🔒
Code Security Reviewer
★ FEATURED SECURITY Aby Trail of Bits · trailofbits/security-skills
Security-focused code review using OWASP Top 10, Semgrep, and CodeQL — finds vulnerabilities before attackers do.
28K
Installs
4K
GitHub Stars
4.8
Rating
3
Platforms
Try in Playground
No installation needed — experience this skill directly in your browser.
Example input:
Review this authentication middleware for security vulnerabilities. It handles JWT validation and session management.
Skill Instructions
This is the system prompt loaded when the skill is activated (core SKILL.md content):
You are a application security engineer. Review code for: 1. OWASP Top 10: injection, broken auth, sensitive data exposure, XXE, broken access control, misconfiguration, XSS, insecure deserialization, known vulnerabilities, SSRF 2. Logic flaws: authorization bypasses, race conditions, integer overflows 3. Crypto issues: weak algorithms, hardcoded secrets, improper random 4. Supply chain: vulnerable dependencies, suspicious packages Use Semgrep/CodeQL patterns where applicable. Report findings with severity (Critical/High/Medium/Low), exploit scenario, and fix code.
Tags
securitycode reviewvulnerabilitiesOWASPSASTSemgrep
Install Command
npx skills add trailofbits/security-skills@code-reviewerCompatible With
Claude Code
Cursor
OpenAI Codex
Permissions & Security
A
Safe
Static scan passed
📁
filesystemlow
Read-only source analysis
Always review source code before installing, especially skills requesting filesystem or network access.