Does it check for specific vulnerabilities like the OWASP Top 10?

Yes, the skill includes a dedicated assessment phase that evaluates your system against the OWASP API Security Top 10 checklist.

Can I target a specific component instead of the entire codebase?

Yes, you can provide a specific scope or component name as an argument to focus the security analysis on a particular service or layer.

What is the primary goal of the Security Review skill?

It is designed to identify architectural security gaps, focusing specifically on Zero Trust alignment, authentication/authorization mechanisms, and data protection strategies.

What kind of output does the security report include?

It provides an executive summary with risk levels, a Zero Trust maturity score, detailed findings categorized by severity, and a prioritized remediation roadmap.

Security Architecture Reviewer

Name: Security Architecture Reviewer
Author: melodic-software

bymelodic-software

•

Security & Testing

Conducts comprehensive security audits and Zero Trust assessments to identify vulnerabilities and provide prioritized remediation guidance.

The Security Review skill enables developers to perform deep-dive security audits within their codebase using Zero Trust principles. It automates the discovery of authentication gaps, authorization flaws, data protection issues, and network security weaknesses. By evaluating systems against the OWASP API Security Top 10 and providing a prioritized remediation roadmap, it helps engineering teams proactively harden their infrastructure and ensure compliance with modern security standards during the development lifecycle.

Key Features

01Automated discovery of authentication and authorization mechanisms

02OWASP API Security Top 10 vulnerability assessment

03Comprehensive data protection and secrets management review

0438 GitHub stars

05Zero Trust maturity assessment and alignment evaluation

06Prioritized remediation roadmap with clear action items

Use Cases

01Performing a pre-release security audit of a microservices architecture

02Assessing a legacy system's alignment with modern Zero Trust security principles

03Identifying hardcoded secrets, weak encryption, and network segmentation gaps

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add melodic-software/claude-code-plugins security-review

For use in Claude.ai and ChatGPT

Download Skill