Audit changed code for security vulnerabilities without applying fixes.
npx skills add https://github.com/0xdeafcafe/skills --skill review-security-0xdeafcafe
Please help me install this Agent Skill. Skill: review-security Source: https://github.com/0xdeafcafe/skills/tree/main/skills/review-security Command: npx skills add https://github.com/0xdeafcafe/skills --skill review-security-0xdeafcafe
This Skill performs a focused, read-only security audit on the files changed in a PR or working tree so you can catch vulnerabilities, secret leaks, missing authorization checks, and unsafe dependencies before code is merged.
Ask the assistant to run review-security on the current PR or working tree and return only security findings.
High-intent search queries and answers about installing and using this skill.
To audit a pull request for security vulnerabilities, run a read-only security review on the changed files. This process checks for authorization gaps, input validation issues, and unsafe dependencies without applying any fixes to the working tree.
Diff-based code review checks new routes for authentication, authorization, input validation, output encoding, CSRF, SSRF, CORS, session, crypto, and deserialization risks. It analyzes only the touched files to identify potential security exposures before merging.
Yes, you can scan for hardcoded secrets and vulnerable dependencies in Python and npm projects. The review process runs ecosystem-specific audit tools across npm, Python, Rust, and Go to detect exposed tokens and unsafe package dependencies.
Security code review does not automatically fix vulnerable code. It performs a read-only analysis and emits findings in a structured severity-based schema with explicit fix guidance, requiring manual intervention to resolve the identified vulnerabilities.
Security findings are reported in a consistent structured schema with severity levels and fix guidance after a dependency audit and secret scan. The output includes prioritized vulnerabilities and explicit coverage-gap reporting for sensitive issues like live secret exposure.
0xdeafcafeReview changed source files for design and structural quality issues.
1J6K21Review code changes across correctness, readability, architecture, security, and performance.
eliottbusinessAutomate pre-commit code review with static analysis and security scanning.
temple-slopeReview git diffs for secrets, vulnerabilities, and injections.
