skills.rest
LeonMelamud
LeonMelamudCOMMUNITY
Explore all skills by this author →
Website𝕏@leonmelamudGitHub

code-security-audit

Identify high-confidence vulnerabilities in GitHub pull requests and branch diffs.

2|Updated Feb 22, 2026
Search Tags:#automation#security#github#audit#diff#pr#claude-code
One-click install
npx skills add https://github.com/LeonMelamud/claude-code-security-review --skill code-security-audit-leonmelamud
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: code-security-audit
Source: https://github.com/LeonMelamud/claude-code-security-review/tree/main
Command: npx skills add https://github.com/LeonMelamud/claude-code-security-review --skill code-security-audit-leonmelamud

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires PyGithub, requests, anthropic, and includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

AI-powered security audits of code changes and diffs identify high-confidence vulnerabilities introduced by pull requests, enabling faster, more reliable remediation.

Core Features & Use Cases

  • Diff-aware scanning: analyzes only modified files in PRs
  • False positive filtering: leverages Claude Code with structured criteria to keep true issues and drop noise
  • CI integration: works with GitHub Actions and Tessl workflows for automated reviews
  • Language-agnostic: applicable to projects in any language
  • Actionable output: returns structured findings and summaries for automation

Quick Start

Install and run the Claude Code Security Reviewer on PRs to audit security of changed files.

Frequently Asked Questions about code-security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate security audits for pull requests?▼

Automate security audits for pull requests by integrating an AI-powered reviewer into your CI pipeline to analyze modified files in PRs and return structured findings. This Skill identifies high-confidence vulnerabilities introduced by code changes using a structured three-phase workflow.

Can I use Claude Code to scan GitHub branch diffs for vulnerabilities?▼

Yes, you can use Claude Code to scan GitHub branch diffs for vulnerabilities. This Skill applies a diff-aware scanning mechanism to analyze only modified files in pull requests and branch diffs, leveraging Anthropic's API to identify high-confidence security issues.

How do I filter false positives from automated code security reviews?▼

Filter false positives from automated code security reviews by leveraging Claude Code with structured criteria to keep true issues and drop noise. This Skill applies optional false-positive filtering during its three-phase workflow to ensure actionable output.

Does this security audit Skill work with GitHub Actions and CI pipelines?▼

Yes, this security audit Skill works with GitHub Actions and Tessl workflows for automated reviews. It returns a structured findings report and summaries suitable for CI pipelines and security reviews, enabling seamless integration into your existing development workflow.

Is there a language-agnostic tool for finding vulnerabilities in code changes?▼

Yes, this tool is language-agnostic for finding vulnerabilities in code changes. It applies diff-aware scanning to analyze only modified files in PRs regardless of programming language, identifying high-confidence vulnerabilities introduced by the code changes.

Related Skills

Explore More Software Engineering Skills→
iani-kuliiani-kuli

github-auth

Configure GitHub authentication via gh CLI or Git credential helpers.

Community
Intermediate
TrevorEdrisTrevorEdris
2

security-review

Analyze pull request diffs and metadata to identify high-confidence security issues.

Community
Intermediate
EmasoftEmasoft
13

amoa-github-action-integration

Automate Claude Code GitHub Actions for PR review, mention responses, and issue triage.

Community
Intermediate
IndustrialIndustrial

code-reviewer

Analyze code for security vulnerabilities and performance issues.

Community
Advanced