pr-security-review

Analyze pull request diffs for security vulnerabilities and remediation guidance.

42|9|Updated Mar 16, 2026
One-click install
npx skills add https://github.com/drvoss/everything-copilot-cli --skill pr-security-review
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: pr-security-review
Source: https://github.com/drvoss/everything-copilot-cli/tree/main/skills/security/pr-security-review
Command: npx skills add https://github.com/drvoss/everything-copilot-cli --skill pr-security-review

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill analyzes pull request diffs for security issues to prevent insecure merges.

Core Features & Use Cases

  • Automatically analyzes PR diffs for vulnerabilities, hardcoded secrets, injection risks, and broken access control.
  • Helps ensure secure code reviews across authentication and authorization changes before merging.
  • Works within PR workflows to surface actionable findings and remediation guidance.

Quick Start

Review a pull request diff to automatically surface security issues before merging.

Frequently Asked Questions about pr-security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I analyze pull request diffs for security vulnerabilities before merging?

To analyze pull request diffs for security vulnerabilities, you can automatically scan code changes for hardcoded secrets, injection risks, and broken access control. This surfaces actionable findings with remediation guidance before code is merged.

What security issues can automated PR diff checks detect in authentication changes?

Automated PR diff checks for authentication changes can detect hardcoded secrets, injection risks, and broken access control misconfigurations. They analyze the specific code modifications to surface vulnerabilities and provide actionable remediation guidance.

How do I check code diffs for hardcoded secrets during a pull request review?

To check code diffs for hardcoded secrets during a pull request review, you scan the specific file modifications. The analysis identifies exposed credentials within the changes and provides actionable remediation steps to prevent insecure merges.

Can I review authorization changes for broken access control using automated diff analysis?

Yes, you can review authorization changes for broken access control using automated diff analysis. The process examines the modified code to detect misconfigurations and injection risks, delivering actionable findings with remediation guidance.

Do I need MCP methods to access PR diffs for security code reviews?

Yes, accessing PR diffs for security code reviews requires MCP methods to retrieve the pull request changes. Once the diff data is obtained, the analysis can detect secrets, injections, and misconfigurations across the modified files.

What is the best way to prevent insecure merges when handling sensitive data changes?

The best way to prevent insecure merges when handling sensitive data changes is to analyze pull request diffs for security issues. This detects vulnerabilities and misconfigurations in data handling code, providing remediation guidance before integration.