skills.rest
bossjones
bossjonesCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

boss-security-review

Automates security code review and generates a severity-graded findings report.

1|Updated Jan 4, 2026
Search Tags:#code quality#security review#code audit#vulnerability detection#security assessment
One-click install
npx skills add https://github.com/bossjones/boss-skills --skill boss-security-review
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: boss-security-review
Source: https://github.com/bossjones/boss-skills/tree/main/plugins/boss-dev/agent-harness/skills/boss-security-review
Command: npx skills add https://github.com/bossjones/boss-skills --skill boss-security-review

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automates the process of performing a security review on code, providing a structured, severity-graded findings report.

Core Features & Use Cases

  • Security Audit: Reviews code for potential vulnerabilities and issues.
  • Structured Report: Generates a report with severity grading and actionable findings.
  • Custom Scope: Allows review of specific files, directories, or the entire repository.
  • Rule-Based Analysis: Utilizes a security rubric to identify violations and suggest fixes.

Quick Start

Run a security review on your changes before merging with the command: /boss-security-review run a security review on src/auth/

Frequently Asked Questions about boss-security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate a security code review for specific files?▼

Yes, you can run a security audit on an entire repository to identify potential vulnerabilities. The review generates a severity-graded findings report based on a security rubric to highlight violations.

Do I need git to run a vulnerability detection assessment?▼

Yes, git is required for code comparison and rule resolution during the vulnerability detection assessment. The security review relies on git to accurately resolve rules and analyze code changes.

How does a rule-based security audit grade code vulnerabilities?▼

A rule-based security audit grades code vulnerabilities by evaluating code against a security rubric. It identifies violations and generates a structured, severity-graded findings report with actionable suggestions.

Can I review only my recent code changes for security issues?▼

Yes, you can review recent code changes for security issues by specifying a custom scope. The security assessment operates within your defined scope and uses git for code comparison to target specific changes.

Related Skills

Explore More Software Engineering Skills→
securityreviewaisecurityreviewai

project-overview-analysis

Analyzes Git repositories to produce summaries of their structure, risks, and key components.

Official
Intermediate
Canhada-LabsCanhada-Labs
2

agentic-actions-auditor

Analyze GitHub Actions workflows invoking AI coding agents for security risks.

Official
Advanced
TeiNamTeiNam
12

laravel-verification

Automate Laravel project verification for CI/CD pipelines.

Community
Advanced
lciaccilciacci

cpg-analysis

Analyze control flow, data flow, and security vulnerabilities using Joern or CodeQL.

Community
Advanced