security-review
๐ฏSkillfrom shiplightai/agent-skills
|A skill that evaluates your application's security posture against OWASP Top 10, ASVS, and NIST standards through browser-based penetration testing, covering authentication flows, HTTP headers, CORS, CSP, supply chain risks, and generating remediation guidance with regression tests.
Same repository
shiplightai/agent-skills(15 items)
Installation
npx vibeindex add shiplightai/agent-skills --skill security-reviewnpx skills add shiplightai/agent-skills --skill security-review~/.claude/skills/security-review/SKILL.mdSKILL.md
More from this repository10
A Shiplight skill that lets AI coding agents visually verify UI changes in the browser after code modifications. Part of the Shiplight test automation suite, it also includes skills for E2E test creation, triage, and comprehensive reviews covering security, accessibility, performance, and SEO.
Syncs local YAML test cases, templates, and TypeScript functions with the Shiplight cloud for scheduled execution, team sharing, and CI integration.
Evaluates applications against HIPAA, SOC 2, PCI-DSS, and GDPR technical requirements through browser-based validation and generates YAML regression tests for continuous compliance. Follows a 5-phase workflow of educate, scope, analyze, report, and remediate with findings mapped to specific regulatory sections.
AI-powered test automation skill for design review that lets coding agents verify visual consistency and UI quality autonomously via the Shiplight MCP server.
A Generative Engine Optimization review skill that evaluates how well your content is optimized for AI-powered search engines like ChatGPT, Perplexity, and Google AI Overviews, assessing citation-worthiness, content structure, authority signals, llms.txt, and AI retrieval readiness across five phases from education to remediation.
Evaluates application resilience by testing error handling, graceful degradation, API contract compliance, edge cases, and failure recovery with browser-based fault injection.
Evaluates SEO and discoverability by checking meta tags, structured data, Open Graph, crawlability, sitemap, robots.txt, semantic HTML, and social sharing with browser-based validation.
Evaluates how your application handles personal data by reviewing PII collection, data flows, third-party tracking, consent mechanisms, and storage practices with browser-based validation against GDPR, CCPA, and OWASP standards.
AI-powered test automation skills that let coding agents verify, test, and iterate autonomously, supporting Claude Code, Cursor, Codex, and 40+ other agents via the Shiplight MCP server.
Review orchestrator that assesses applications and recommends the right combination of design, security, privacy, compliance, resilience, performance, SEO, and GEO reviews.