auto-sec-report-pr

Automate security scanning of pull requests, spec files, and branch diffs.

Updated May 31, 2026

Search Tags:#code review #security analysis #vulnerability scanning #PR analysis #branch diff analysis

Ready to run

npx skills add https://github.com/zizzfizzix/agentic-engineering-framework --skill auto-sec-report-pr

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: auto-sec-report-pr
Source: https://github.com/zizzfizzix/agentic-engineering-framework/tree/main/core/ai/skills/auto-sec-report-pr
Command: npx skills add https://github.com/zizzfizzix/agentic-engineering-framework --skill auto-sec-report-pr

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automates the security analysis of pull requests, specification files, or branch diffs, identifying potential security issues and providing actionable next steps.

Core Features & Use Cases

Security Analysis: Perform in-depth security analysis on code, specifications, or branch diffs.
Paranoid Scanning: Scan for both obvious and non-obvious security issues, including OWASP Top 10 and other vectors.
Next Steps: Generate detailed next steps for further investigation and remediation.
Use Case: When a pull request is submitted, use this Skill to automatically analyze it for security vulnerabilities and flag any issues to the developer.

Quick Start

Analyze the security of a pull request with ID 1234.

Frequently Asked Questions about auto-sec-report-pr

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I automate security analysis of pull requests?▼

Automate security analysis of pull requests by running an integration that scans submitted PRs, flags potential vulnerabilities, and generates remediation steps without manual intervention. This Skill performs in-depth checks for both obvious and non-obvious security issues automatically.

Can I scan branch diffs and spec files for security vulnerabilities?▼

Yes, you can scan branch diffs and spec files for security vulnerabilities. The scanning mechanism performs deep analysis on the provided code changes and specifications, identifying OWASP Top 10 issues and other vectors to flag potential security problems.

Does this PR security scanner integrate with GitHub?▼

Yes, the PR security scanner integrates directly with GitHub to analyze pull requests. It automates the vulnerability scanning process by evaluating branch diffs and code changes submitted, then flagging identified issues to the developer.

What is the best way to check a pull request for OWASP Top 10 issues?▼

The best way to check a pull request for OWASP Top 10 issues is using an automated paranoid scanning process. This approach scans for both obvious and non-obvious security vectors within the branch diff and generates detailed next steps for investigation and remediation.

Do I need manual intervention to generate vulnerability remediation steps?▼

No, you do not need manual intervention to generate vulnerability remediation steps. The automated security analysis evaluates the pull request or branch diff, detects vulnerabilities, and produces detailed next steps for further investigation and remediation automatically.