# Securityreview

> Performs static security review of source code and repositories for vulnerabilities such as hardcode

Performs static security review of source code and repositories for vulnerabilities such as hardcoded secrets, broken access control and IDOR, SQL injection, XSS, command injection, SSRF, weak cryptography, authentication flaws, LLM prompt injection and output handling, and PII leaks into logs or third-party SDKs. Use when the user explicitly asks for a security audit, vulnerability scan, or security review of code in a workspace, and do not use it for general coding help.

- Page: https://ss33.ai/skills/boomsystel-code/securityreview-36909910737
- Publisher: boomsystel-code
- Category: [Security](https://ss33.ai/skills/category/security-w9g95g) › [Application security](https://ss33.ai/skills/category/security-w9g95g/application-security-6s8pr9)
- Source: https://github.com/boomsystel-code/openclaw-workspace/blob/3a2689d2ad49e5449d863e6dd071e100d0666ad9/skills/securityreview/SKILL.md

## Skill

This skill's licence does not allow redistribution, so the store does not serve its text. Get it from the author: https://github.com/boomsystel-code/openclaw-workspace/blob/3a2689d2ad49e5449d863e6dd071e100d0666ad9/skills/securityreview/SKILL.md