bookforge-source-code-security-reviewPerform a systematic white-box security review of web application source code to find exploitable vulnerabilities. Use this skill when: you have authorized a...
Install via ClawdBot CLI:
clawdbot install quochungto/bookforge-source-code-security-reviewGrade Fair — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.
Potentially destructive shell commands in tool definitions
eval(Calls external URL not in known-safe list
https://github.com/bookforge-ai/bookforge-skills/tree/main/books/web-applicationAudited May 1, 2026 · audit v1.0
Generated May 21, 2026
A financial services startup is launching a new online banking portal. The security team uses this skill to systematically review the Java/Spring backend for SQL injection and XSS before going live, preventing costly post-launch breaches.
After a data breach in a healthcare application, the incident response team performs a white-box review using this skill to trace how an attacker exploited a path traversal vulnerability in a PHP file upload feature, leading to remediation.
A retail company plans to integrate a third-party payment gateway library. Using this skill, they audit the open-source code for backdoor passwords and buffer overflow vulnerabilities, ensuring no hidden risks are introduced.
During a penetration test for a government agency, the tester uses source code access to identify hardcoded credentials in a .NET application that were invisible during black-box testing, significantly expanding the attack surface.
A technology conglomerate acquires a SaaS company and uses this skill to assess the acquired codebase for embedded security flaws like OS command injection and format string bugs, mitigating integration risks.
Offer white-box security reviews as a premium service priced by project scope, attracting clients who need thorough source code analysis before deployment or after incidents.
Provide automated SAST tooling that leverages this methodology to supplement manual reviews, sold as a subscription service to development teams for continuous security.
Help organizations meet PCI DSS, HIPAA, or SOC 2 requirements by performing certified code reviews, charging per assessment with deliverable reports for auditors.
💬 Integration Tip
Integrate this skill into your CI/CD pipeline as a manual review gate, complementing automated SAST tools. Use with a code browsing tool like 'Read' and 'Grep' for efficient source navigation.
Scored May 21, 2026
Control desktop applications on Windows — launch, close, focus, resize, move windows, simulate keyboard/mouse input, manage processes, control VSCode, read clipboard, and capture screen info. Use when the user wants to interact with any running program, switch windows, type text, press shortcuts, open files in VSCode, manage running processes, or get system display information.
Conduct rigorous, adversarial code reviews with zero tolerance for mediocrity. Use when users ask to "critically review" my code or a PR, "critique my code", "find issues in my code", or "what's wrong with this code". Identifies security holes, lazy patterns, edge case failures, and bad practices across Python, R, JavaScript/TypeScript, SQL, and front-end code. Scrutinizes error handling, type safety, performance, accessibility, and code quality. Provides structured feedback with severity tiers (Blocking, Required, Suggestions) and specific, actionable recommendations.
Coding style memory that adapts to your preferences, conventions, and patterns for consistent coding.
Pragmatic coding standards for writing clean, maintainable code — naming, functions, structure, anti-patterns, and pre-edit safety checks. Use when writing new code, refactoring existing code, reviewing code quality, or establishing coding standards.
Claude Code integration for OpenClaw. This skill provides interfaces to: - Query Claude Code documentation from https://code.claude.com/docs - Manage subagents and coding tasks - Execute AI-assisted coding workflows - Access best practices and common workflows Use this skill when users want to: - Get help with coding tasks - Query Claude Code documentation - Manage AI-assisted development workflows - Execute complex programming tasks
Plan, draft, version, and refine written content with enforced versioning and quality audits.