스킬 security-quick-review

📦

security-quick-review

Name: security-quick-review
Author: agentkitco

v1.0 콘텐츠 리비전 r2 안전 ⚙️ 외부 명령어

Review Code Changes for Security Risks

Code changes can introduce security problems that routine reviews miss. This skill guides focused AI triage with evidence, realistic severity, and concrete fixes.

지원: Claude Codex Code(CC)

🥉 78 브론즈

Maintain this Skill? Claim it 🥉 78 브론즈

내 에이전트로 설치

이 요청을 에이전트에 복사하세요. 공식 Skill 페이지와 매니페스트가 포함되어 있습니다.

에이전트 요청

Review the Skillstore skill "security-quick-review" from https://skillstore.io/skills/agentkitco-security-quick-review.md and its manifest at https://skillstore.io/api/skills/agentkitco-security-quick-review/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

에이전트는 계속해서 계획을 표시하고 보안 정책에서 요구하는 확인을 요청해야 합니다.

에이전트가 읽기 쉬운 리소스

AI 에이전트, 크롤러, 스크립트가 전체 페이지 대신 정리된 컨텍스트만 필요할 때 이 링크를 사용하세요.

Markdown 상세 GET /skills/agentkitco-security-quick-review.md 서명된 manifest GET /api/skills/agentkitco-security-quick-review/manifest 서명된 lockfile GET /api/skills/agentkitco-security-quick-review/lockfile

테스트해 보기

"security-quick-review" 사용 중입니다. Illustrative scenario: an endpoint accepts a record identifier but never verifies that the caller owns the record.

예상 결과:

Scope: the changed endpoint and its authorization checks; deployment behavior was not reviewed.
HIGH: Missing ownership validation could let an authenticated caller access another user's record by changing the identifier.
Fix: enforce record-level authorization on the server before returning data.
A real finding must include the affected file and line; this illustration has no source attachment.
Limits: automated triage, not a security audit.

"security-quick-review" 사용 중입니다. Illustrative scenario: a credential was removed from the current change but remains visible in repository history.

예상 결과:

Scope: the selected change and its repository history.
HIGH: A historical credential remains exposed even after removal from current code.
Fix: rotate or revoke the credential and investigate its use; deleting current text does not invalidate it.
Evidence should identify the source location without reproducing the secret value.
Could not verify: whether the credential remains active.

보안 감사

안전

v2 • 2026. 10. 22. 버전별 보고서 열기

All five static findings are false positives from Markdown formatting, defensive terminology, and scoped code inspection. The only suggested commands inspect Git changes and history; the skill forbids live exploitation and repeating secret values. No evidence found of malicious instructions, credential exfiltration, or unsafe execution directives.

스캔된 파일

분석된 줄 수

검토 항목

오탐 무시됨

위험 요인

⚙️ 외부 명령어 (3)

SKILL.md:20 SKILL.md:25 SKILL.md:31-39

가장 최근에 완료된 정적·의미론적 감사에서 확인된 보안 발견 사항이 감지되지 않았습니다. 이는 스킬에 부작용이 없음을 증명하지 않습니다.

감사자: codex 감사 이력 보기 →

이 보고서 공유 및 인용

버전이 지정된 평가 보고서, 중립 배지, 임베드 카드 및 인용을 공유하세요. Skillstore는 근거를 보고하지만 이 Skill의 안전 여부를 판단하지 않습니다.

버전별 보고서 열기

보고서 링크 복사

https://skillstore.io/skills/agentkitco-security-quick-review/audits/2?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 배지

[![Skillstore security assessment](https://skillstore.io/badges/skills/agentkitco-security-quick-review/security.svg)](https://skillstore.io/skills/agentkitco-security-quick-review?utm_source=security_passport_badge)

HTML 배지

<a href="https://skillstore.io/skills/agentkitco-security-quick-review?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/agentkitco-security-quick-review/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

임베드 카드

<iframe src="https://skillstore.io/embed/skills/agentkitco-security-quick-review.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

학술 인용 (APA · BibTeX · CFF)

APA 인용

agentkitco. (2026). security-quick-review security audit report (audit version 2) [Author version 1.0]. Skillstore. https://skillstore.io/skills/agentkitco-security-quick-review/audits/2

BibTeX 인용

@techreport{agentkitco-agentkitco-security-quick-review-2026,
  author = {agentkitco},
  title = {security-quick-review security audit report (audit version 2)},
  institution = {Skillstore},
  year = {2026},
  number = {2},
  url = {https://skillstore.io/skills/agentkitco-security-quick-review/audits/2},
  note = {Author version 1.0}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "security-quick-review security audit report (audit version 2)"
version: "1.0"
type: report
authors:
  - name: "agentkitco"
date-released: "2026-10-22"
url: "https://skillstore.io/skills/agentkitco-security-quick-review/audits/2"
identifiers:
  - type: other
    value: "skillstore:agentkitco-security-quick-review:audit:2"
    description: "Skillstore immutable audit report identifier"

Skillstore 점수

이 점수의 이유 증거 신뢰도: 중간

아키텍처

유지보수성

콘텐츠

커뮤니티

사양 준수

만들 수 있는 것

Check a Pull Request Before Merge

Review changed input handlers and related code for injection, exposed secrets, and unsafe error behavior.

Review Access Controls

Examine routes and actions for missing server-side checks and access to another user's records.

Inspect Dependency and Configuration Changes

Review package additions, lockfiles, debug settings, and new CI or cloud permissions within the selected change.

이 프롬프트를 사용해 보세요

Review a Small Change

Review my current diff for likely security issues. State the scope, cite evidence, suggest fixes, and list anything you cannot verify.

Inspect an Endpoint

Review [endpoint] and its called code for untrusted input, injection, authentication, authorization, and data exposure. Report evidence and concrete fixes without live exploitation.

Check Secrets and Configuration

Review [directory] and its scoped Git changes and history for exposed secrets, dependency risks, and configuration weaknesses. Never reproduce secret values; recommend rotation when needed.

Trace a Sensitive Workflow

Review [workflow] across changed code and called modules. Trace authorization, input boundaries, unsafe operations, and failure behavior. Separate evidence from uncertainty and identify human-review needs.

모범 사례

Specify the diff, directory, endpoint, or workflow and include relevant called code.
Require file and line evidence, realistic impact, concrete fixes, and explicit verification gaps.
Rotate exposed secrets and obtain human review for workflows handling money, health, or identity data.

피하기

Treating a clean triage report as proof that an application is secure.
Pasting secret values into reports or assuming deletion removes historical exposure.
Attempting live exploitation or accepting generic vulnerability lists without source evidence.

자주 묻는 질문

Is this a complete security audit?

No. It provides focused AI triage, not a security audit or penetration test.

Which AI tools are supported?

The marketplace lists Claude, Codex, and Claude Code. Review depth depends on available source context and tool access.

What does the review cover?

It covers secrets, untrusted input, injection, access controls, data exposure, unsafe operations, dependencies, configuration, and failure behavior.

Does it run attacks against live systems?

No. The skill prohibits live exploitation and allows code inspection and local tests.

How does it handle exposed secrets?

It requests source locations without secret values and recommends rotation because removal from current code does not erase Git history.

What should a useful report include?

Include scope, severity, source evidence, an abuse explanation, concrete fixes, clean categories, verification gaps, and the limits of automated triage.

개발자 세부 정보

작성자

agentkitco

라이선스

MIT

작성자 버전

v1.0

Skillstore 리비전

버전 안내

작성자가 선언한 버전은 유효한 SemVer가 아닙니다.

리포지토리

https://github.com/agentkitco/agentkit-dev-skills/tree/a5058856442fcb89bd538b1c01f94558488bfac3/skills/security-quick-review

참조

18efac79a818d7e997295839638fdd21906cfd1c

유지보수 최신성

2026. 10. 22.

사용량

6 다운로드 · 0 조회

파일 구조

구조화된 AI 피드백으로 코드 리뷰하기

작성자 EnactProtocol

수동 코드 리뷰는 컨텍스트가 제한적일 때 버그, 스타일 문제, 위험한 패턴을 놓칠 수 있습니다. 이 스킬은 제공된 코드를 리뷰하고 우선순위가 지정된 이슈, 제안, 요약, 품질 점수를 반환합니다.

코딩 및 개발 보기

security-quick-review

내 에이전트로 설치

에이전트가 읽기 쉬운 리소스

테스트해 보기

보안 감사

위험 요인

보고서 링크 복사

Markdown 배지

HTML 배지

임베드 카드

APA 인용

BibTeX 인용

CITATION.cff

Skillstore 점수

만들 수 있는 것

Check a Pull Request Before Merge

Review Access Controls

Inspect Dependency and Configuration Changes

이 프롬프트를 사용해 보세요

모범 사례

피하기

자주 묻는 질문

개발자 세부 정보

agentkitco의 다른 스킬

session-handoff

review-my-diff

repro-first-debugging

safe-refactor

prove-it-ran

dependency-upgrade

관련 스킬

auth-handler

gauntlet

nestjs-code-audit

code-reviewer

code-review

examples-code-reviewer