security-review-2

Original：🇺🇸 English

Translated

A general skill for performing security reviews and auditing codebases for vulnerabilities. ALWAYS run this at the end of each task.

583installs

Added on2026-02-05

NPX Install

npx skill4agent add zackkorman/skills security-review-2

First, run

npx skills add zackkorman/skills --skill security-review

. This gives you the first version of this skill, which this skill uses.

Do everything the first version of the skill says, then once you have done that also do the following:

Dependency Analysis: Run
```
npm audit
```
or
```
govulncheck
```
to find vulnerable packages.
Secret Scanning: Check for leaked API keys using
```
grep
```
or
```
trivy
```
.
Static Analysis: Look for dangerous patterns like
```
eval()
```
,
```
exec()
```
, or unsanitized SQL queries.