security-review
Reviews code for security best practices, covering secrets management, input validation, SQL injection, XSS, CSRF, authentication, rate limiting, and dependency vulnerabilities.
Lift—not yet benchmarked
92
Trustsecurity · quality · license · upkeep
Scan Saferisk 0/100
LicenseMITserved via MCP
Saferisk 0/100scanner: sb-static v1 (SkillSpector integration is a seam)
info
References non-allowlisted domain: api.example.com
in SKILL.md
SKILL.mdinfo
References non-allowlisted domain: owasp.org
in SKILL.md
SKILL.mdinfo
References non-allowlisted domain: supabase.com
in SKILL.md
SKILL.mdinfo
References non-allowlisted domain: portswigger.net
in SKILL.md
SKILL.mdMethodology: static pass over the pinned file tree — secret patterns, binaries, install hooks, URL allowlist comparison, allowed-tools breadth. Full methodology →