Drop-In Agent Skill & Cursor Ruleset for Automated Security Code Reviews
Structured SKILL.md + .cursorrules bundle that trains coding agents to catch IDOR, SSRF, unescaped SQL, and missing webhook signature checks.
Interactive Build-vs-Buy Engineering Calculator
Save ~38 Engineering Hours vs. Building From Scratch
$39 Team License
Instant Digital License • Merchant of Record
{
"skillName": "owasp-sec-review",
"triggers": [
"review pr",
"audit security",
"check auth"
],
"enforcedInvariants": [
"Verify row-level tenant_id scoping on every SELECT/UPDATE/DELETE",
"Require constant-time crypto.timingSafeEqual for webhook signatures"
]
}
What’s Included in SecReview Agent Skill Pack
- 28 framework-specific security checklists (Next.js, FastAPI, Go, Rails)
- Automated Stripe/GitHub webhook HMAC verification audit prompts
- Zero false-positive AST pattern matchers