Works with the AI Agents you already use

    Claude CodeClaude CodeCursorCursorCodex CLICodex CLIDeepSeekDeepSeekMuseMuse+22 more

    Security Reviewer (Persona)

    1

    Reviews code for security risks: dependencies, secrets, threats and a checklist. Includes the persona plus 4 skills: dependency auditor, secret hygienist, security checklist, threat sketcher.

    $39

    Secure checkout via Stripe

    Money-back guarantee

    Converts to your local currency at checkout

    Security scanned
    Security Reviewer (Persona)

    Security Reviewer (Persona)

    Example session with this skill installed

    Review this Node.js route for security risks: app.post('/login', (req, res) => { const { user, pass } = req.body; db.query(SELECT * FROM users WHERE username = '${user}' AND password = '${pass}'); });

    • Read your context and instructions
    • Compiled the security reviewer persona

    Finding: SQL Injection vulnerability in login route.
    Risk: Total database compromise.
    Likelihood: High.
    Mitigation: Use parameterized queries or an ORM to prevent raw string interpolation.
    Note: Addressed is not the same as secure; consider adding rate limiting next.

    Connects securely to your tools. The creator never sees your data.

    About this skill

    Reviews code for security risks: dependencies, secrets, threats and a checklist.

    What is inside

    The persona plus 4 skills.

    • dependency auditor
    • secret hygienist
    • security checklist
    • threat sketcher

    Use cases

    • Reviewing a new PR for common OWASP Top 10 vulnerabilities before merge.
    • Auditing a package.json or requirements.txt for known dependency risks.
    • Creating a defensive checklist for a two-person engineering team starting a new service.
    • Hardening environment configurations and CI/CD pipelines against unauthorized access.

    Known limitations

    Does not perform penetration testing, incident forensics for legal use, or compliance certifications. Will not generate exploit code or bypass techniques.

    Find more skills like this on the Claude Skills Marketplace, the Codex Skills Marketplace and the Gemini Skills Marketplace, or browse Claude Skills for Security.

    No penetration testing or exploit generation. Cannot provide formal compliance certifications (SOC2/PCI). Will not display secret values in plain text.

    How to use

    1. 1

      Connect your agent to the Agensi MCP

      Copy the prompt and paste it into Claude, ChatGPT, Cursor or any agent that supports MCP. It sets up the connection for you. Manual setup

    2. 2

      Sign in to Agensi

      Your agent shows a sign-in link. Sign in and click Allow.

    3. 3

      Ask for what you need

      Your agent loads this skill and uses it on your task. It always asks before buying a skill.

    Reviews

    No reviews yet

    Be one of the first to try it. Every listed skill goes through the trust checks below.

    Security scanned

    Checked by our 8-point scan before listing

    Fresh listing

    Recently published to Agensi

    Money-back guarantee

    Doesn't do what its page promises? You get your money back.

    Trust & safety

    Security scan

    Security scan passed 3 months ago

    Permissions

    No special permissions declared or detected

    Listed3 months ago
    Updated5 days ago

    What's inside

    Frequently Asked Questions

    This skill integrates with most major LLM-based coding assistants and autonomous agents that support system-prompt customization or persona-based extensions.

    Unlike general models that may offer generic or alarmist advice, this persona is fine-tuned to focus on high-likelihood defensive hardening and provides proportionate, actionable fixes tailored for small engineering teams.

    A persona and 4 skills, each a plain SKILL.md file: dependency auditor, secret hygienist, security checklist, threat sketcher. The package has no scripts, templates or separate guides.

    No, this is a strictly defensive tool; it is designed to identify vulnerabilities and suggest hardening steps, but it will refuse to generate exploit code or bypass techniques.

    Yes, the persona is designed to handle various codebases and configuration files, including dependency manifests like package.json and requirements.txt, as well as CI/CD pipeline definitions.

    New in Security