# obra-security-review

> Security audit with vulnerability detection, OWASP compliance, and remediation guidance

- Author: MikkohChen
- Repository: Frictionless-Labs/claude-skills
- Version: 20251222045014
- Stars: 1
- Forks: 0
- Last Updated: 2026-02-07
- Source: https://github.com/Frictionless-Labs/claude-skills
- Web: https://mule.run/skillshub/@@Frictionless-Labs/claude-skills~obra-security-review:20251222045014

---

---
name: obra-security-review
description: 'Security audit with vulnerability detection, OWASP compliance, and remediation guidance'
---
# obra-security-review

| Field | Value |
|-------|-------|
| **skill_id** | obra-security-review |
| **skill_name** | Security Review |
| **description** | Security audit with vulnerability detection, OWASP compliance, and remediation guidance |
| **repo** | obra |
| **category** | dev |
| **impl_readiness** | 80 |
| **business_value** | 81 |
| **risk_level** | low |
| **role_alignment** | Architect |
| **priority_tier** | TIER-1 |
| **effort_hours** | 0.5 |
| **dependencies** | obra-code-review |
| **maturity** | active |
| **lifecycle** | candidate |
| **zip_inclusion** | ZIP-1 |

---

## Purpose

Performs security-focused code review identifying vulnerabilities, checking OWASP compliance, and providing remediation guidance with severity ratings.

---

## Domain Alignment

| Aspect | Specification |
|--------|---------------|
| **Primary Use** | Security assessment and hardening |
| **Target Users** | Security engineers, all developers |
| **Integration Points** | SAST tools, dependency scanners |

---

## Triggers

| Trigger Type | Pattern |
|--------------|---------|
| **Implicit** | "security", "vulnerability", "OWASP" keywords |
| **Explicit** | `@security` or `@vuln` prefix |
| **Contextual** | Auth, crypto, or input handling code |

---

## Input/Output

| Direction | Format | Example |
|-----------|--------|---------|
| **Input** | Code for review | "Review this auth handler" |
| **Output** | Security findings | Vulnerabilities, severity, fixes |

---

## Safeguards

| Safeguard | Implementation |
|-----------|----------------|
| **OWASP Top 10** | Check against current list |
| **Severity Classification** | Critical, High, Medium, Low |
| **No False Confidence** | State limitations clearly |
| **Remediation Priority** | Rank fixes by impact |

---

## Notes

- **Full Slug**: obra/superpowers
- **Source**: ChatGPT A1 Master Catalog audit
- **Batch**: ZIP-1 Batch 3 (Extended Workflow)