code-security-audit

Identify high-confidence vulnerabilities in GitHub pull requests and branch diffs.

2|Updated Feb 22, 2026

Search Tags:#automation #security #github #audit #diff #pr #claude-code

Ready to run

npx skills add https://github.com/LeonMelamud/claude-code-security-review --skill code-security-audit-leonmelamud

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: code-security-audit
Source: https://github.com/LeonMelamud/claude-code-security-review/tree/main
Command: npx skills add https://github.com/LeonMelamud/claude-code-security-review --skill code-security-audit-leonmelamud

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires PyGithub, requests, anthropic, and includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

AI-powered security audits of code changes and diffs identify high-confidence vulnerabilities introduced by pull requests, enabling faster, more reliable remediation.

Core Features & Use Cases

Diff-aware scanning: analyzes only modified files in PRs
False positive filtering: leverages Claude Code with structured criteria to keep true issues and drop noise
CI integration: works with GitHub Actions and Tessl workflows for automated reviews
Language-agnostic: applicable to projects in any language
Actionable output: returns structured findings and summaries for automation

Quick Start

Install and run the Claude Code Security Reviewer on PRs to audit security of changed files.

Frequently Asked Questions about code-security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I automate security audits for pull requests?▼

Automate security audits for pull requests by integrating an AI-powered reviewer into your CI pipeline to analyze modified files in PRs and return structured findings. This Skill identifies high-confidence vulnerabilities introduced by code changes using a structured three-phase workflow.

Can I use Claude Code to scan GitHub branch diffs for vulnerabilities?▼

Yes, you can use Claude Code to scan GitHub branch diffs for vulnerabilities. This Skill applies a diff-aware scanning mechanism to analyze only modified files in pull requests and branch diffs, leveraging Anthropic's API to identify high-confidence security issues.

How do I filter false positives from automated code security reviews?▼

Filter false positives from automated code security reviews by leveraging Claude Code with structured criteria to keep true issues and drop noise. This Skill applies optional false-positive filtering during its three-phase workflow to ensure actionable output.

Does this security audit Skill work with GitHub Actions and CI pipelines?▼

Yes, this security audit Skill works with GitHub Actions and Tessl workflows for automated reviews. It returns a structured findings report and summaries suitable for CI pipelines and security reviews, enabling seamless integration into your existing development workflow.

Is there a language-agnostic tool for finding vulnerabilities in code changes?▼

Yes, this tool is language-agnostic for finding vulnerabilities in code changes. It applies diff-aware scanning to analyze only modified files in PRs regardless of programming language, identifying high-confidence vulnerabilities introduced by the code changes.