Sec Owasp Code Review

OWASP Code Review

This skill equips the AI agent to perform targeted security code reviews, specifically looking for vulnerabilities highlighted in the OWASP Top 10 (2025).

Usage

When requesting a code review with this skill, specify the target files and ask the AI to evaluate them against the OWASP Top 10.

Example Triggers:

• "Can you run a security review on auth.js using the OWASP top 10 rules?"
• "Please audit the database layer for A01: Broken Access Control and A05: Injection."

Workflow

1. Context Loading: Review the provided code files.
2. Targeted Scanning: Systematically check for the following anti-patterns:
   • A01: Broken Access Control: Are there checks ensuring the user is authorized to perform the action or access the data?
   • A02: Security Misconfiguration: Are there exposed secrets, overly permissive CORS policies, or debug flags enabled in production code?