skill-security-reviewer

name	skill-security-reviewer
description	OWASP-based security review skill for sensitive AI Agent skills (auth/payment/upload)
version	1.0.0
tags	["security","OWASP","review","gatekeeper"]
when_to_use	Khi skill có auth/payment/upload features — tự động invoke trước Gatekeeper approval. Không dùng cho documentation-only hoặc guidance skills.

Skill Security Reviewer

Security Review Workflow

Skill Creation → [Auth/Payment/Upload?] → YES → Security Review
                                          → NO → Skip to Gatekeeper

OWASP Checklist (5 Critical Categories)

SEC-01: Broken Access Control

check:
  - "Auth checks present on all protected endpoints"
  - "Role/permission validation exists"
  - "No direct object references without ownership check"

SEC-02: Cryptographic Failures

check:
  - "No hardcoded secrets (API keys, passwords, tokens)"
  - "Environment variables for sensitive data"
  - "No credentials in logs or error messages"

SEC-03: Injection

check:
  - "No string concatenation in shell commands"
  - "Parameterized queries used"
  - "Input validation on all user inputs"

SEC-04: Insecure Design

check:
  - "Skill không tạo security holes trong output"
  - "Sandbox execution specified cho scripts"
  - "Rate limiting documented nếu applicable"

SEC-05: Security Misconfiguration

check:
  - "Docker sandboxing specified cho executable scripts"
  - "No default credentials generated"
  - "Error messages không leak sensitive info"

Output Format

=== SECURITY REVIEW REPORT ===
Skill: {skill-name}
Timestamp: {date}
Trigger: {auth|payment|upload|manual}

Verdict: APPROVED / REQUEST CHANGES / REJECTED

Findings:
- [CRITICAL] {description}
- [HIGH] {description}
- [MEDIUM] {description}
- [LOW] {description}

Action: {instruction for builder}

Invocation

triggers:
  auto:
    - skill has authentication feature
    - skill handles payment/data
    - skill accepts file uploads
  manual:
    - user explicitly requests security review

Limitation

• This is a guidance/checklist skill, not a penetration testing tool
• For production security, always conduct manual review
• Security findings are recommendations, not guarantees

---

Limitation: Security review is advisory. Final security responsibility lies with developer.