Security-focused review
A reviewer that reads for exploitable behaviour across files: authorization gaps, injection through helpers, unsafe trust between services.
Sub-techniques
3
| ID | Name | Description |
|---|---|---|
V1038.001 | Should-review gate | Decide from the diff whether a deeper security pass is warranted. |
V1038.002 | Call-chain investigation | Follow user input from entry point to sink with a model, file by file. |
V1038.003 | OWASP classification | Tag each finding with an OWASP Top 10 category for routing and reporting. |
Craft it
- Gate on diff signals: new routes, auth code, deserialization, subprocess, SQL.
- Investigate from the entry point to the sink, not file by file.
- Require a concrete input that reaches the sink.
Reverse engineer it
Signs that a codebase already runs this technique, and where to read how it is configured.
- SECURITY.md, threat model docs, or a security review workflow on paths like auth/ or api/.
Open-source packages
4
- Vulnhuntr protectai/vulnhuntr
- Semgrep CE semgrep/semgrep
- Joern joernio/joern
- SetFit huggingface/setfit