Results for “security-findings”
17 skills
nagarenegishi Owasp Scan
Scans a single file against the OWASP Top 10:2025, tracks cross-file connections, and maintains a persistent findings record.
0
getsentry Security Review
Conducts systematic security code reviews to identify exploitable vulnerabilities, reporting only high-confidence findings after researching the codebase.
845 · bundle
antigravity Fix Review
Verifies that fix commits properly address security audit findings without introducing new bugs or vulnerabilities.
42.4k
alirezarezvani Skill Security Auditor
Scan and audit AI agent skills for security risks before installation, producing a PASS/WARN/FAIL verdict with findings and remediation guidance.
20.4k · bundle
tinh2 Owasp
Systematically audits a web application against the OWASP 2021 Top 10, producing severity-rated, file-level findings with fixes for each category.
13
rosendolu Code Review
Reviews pull request diffs for correctness, security, maintainability, and test coverage, providing severity-ranked findings and a close-out recommendation.
0
More results
zhaoxuya520 Code Audit
Performs authorized source-code security reviews using SAST tools like Semgrep and CodeQL, with manual verification of findings and fix recommendations.
12.8k · bundle
trailofbits Insecure Defaults
Detects fail-open insecure defaults (hardcoded secrets, weak auth, permissive security) that allow apps to run insecurely in production. Use when auditing security, reviewing config management, or analyzing environment variable handling.
6k · bundle
getsentry Find Bugs
Reviews local branch changes for bugs, security vulnerabilities, and code quality issues using a structured checklist and attack surface mapping.
845
chimeranext Security
Implements layered security for Flutter apps: code obfuscation, certificate pinning, secure storage, encryption, biometric authentication, and root/jailbreak detection.
4
auto-skiller Code Review
Reviews staged and unstaged code changes for security vulnerabilities, code quality issues, and adherence to project conventions, reporting findings by severity.
1
tinh2 Secure
Performs a full-stack security posture assessment with 0-100 risk scoring, scanning dependencies, code patterns, configuration, and data handling, then produces a prioritized report and routes to specialized skills.
13
dimillian Review Swarm
Launches four parallel read-only sub-agents to review a git diff or file scope for regressions, security risks, performance issues, and contract gaps, then aggregates findings into a prioritized fix path.
3.8k · bundle
sdiamante13 Review
Performs structured code reviews of git branches, tracking findings in a living document and optionally running deep architectural analysis with subagents.
7 · bundle
shulkwisec Remediate
Generates specific, implementable fixes for each vulnerability finding, producing code patches, configuration changes, dependency updates, and IaC fixes with before/after code and verification steps.
21
agentskillexchange Semgrep Rule Runner
Runs Semgrep static analysis via the semgrep CLI with custom YAML rule packs, supports community rules, parses JSON output, and integrates with the Semgrep App API for findings management.
28
github Threat Model Analyst
Performs STRIDE-A threat model analysis of repositories and systems, producing architecture overviews, DFD diagrams, prioritized findings, and executive assessments. Supports both single analysis and incremental updates with change tracking.
36.2k · bundle