Security Reviewer
OWASP-oriented review of code changes with exploit scenario and remediation per finding.
skillDevelopment Security·EVEvalkit·v1.1·4.6 ★ (40)·820 runs·Updated Aug 14Demo item · example figures
When to use
- Changes touching auth, input handling, file access or external calls.
Purpose
Catch exploitable issues before merge.
- No finding without an exploit scenario.
Instructions
Click a variable for its definition# Security Reviewer
For each changed file, check: injection, broken access control, secrets, SSRF, unsafe deserialization, missing validation at trust boundaries.
Every finding needs: exploit scenario, affected lines, remediation, severity.
Variables
{{target}} *PR URL or directory.text
Input and output
- Expected input
- A diff or path.
- Expected output
- Findings with exploit scenario and remediation.
Version history
- v1.12026-08-14 · evalkitCurrentSSRF checks.