skills.rest
ferrarifankid04
ferrarifankid04COMMUNITY
Explore all skills by this author →
GitHub

review-security

Launches a security-review subagent to audit code changes in a repository diff.

Updated Aug 6, 2026
Search Tags:#code review#pull request#vulnerability#security review#subagent#branch#git diff
One-click install
npx skills add https://github.com/ferrarifankid04/ai-skills-public --skill review-security-ferrarifankid04
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: review-security
Source: https://github.com/ferrarifankid04/ai-skills-public/tree/main/cursor/skills-cursor/review-security
Command: npx skills add https://github.com/ferrarifankid04/ai-skills-public --skill review-security-ferrarifankid04

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Manually auditing every branch or working-tree change for vulnerabilities is slow and easy to skip. This Skill standardizes security review by delegating the local diff to a dedicated security-review subagent and returning a severity-sorted findings table. ## Core Features & Use Cases - Subagent-Based Review: Launches exactly one security-review subagent with a strict prompt shape covering repository path, diff type, and optional base branch. - Flexible Diff Scope: Reviews branch changes against the merge-base by default, or only uncommitted working-tree changes when requested. - PR and Branch Targeting: Checks out a specific PR head or named branch before reviewing when the user provides a link or branch name. - Use Case: Before merging a feature branch, ask for a security review and receive a compact markdown table of findings sorted by severity with file:line locations. ## Quick Start Run /review-security on my current branch to check the changes for security issues.

Frequently Asked Questions about review-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a security review on my code changes?▼

Invoke /review-security and the skill launches one security-review subagent over your repository diff. By default it reviews branch changes against the merge-base with the default base branch, including committed, staged, and unstaged changes.

How do I review only uncommitted changes for security issues?▼

Ask to review uncommitted, local working tree, or not-yet-committed changes. The skill then passes "uncommitted changes" as the Diff value instead of the default "branch changes".

Can I review a specific pull request or branch for vulnerabilities?▼

Yes. Provide a PR link, PR number, or branch name, and the skill checks out that target branch before launching the review. If checkout is blocked by local changes, it asks before stashing.

When should I specify a base branch for the security review?▼

Only specify a base branch when your branch should be compared against something other than the repository's default base branch, such as when the branch was created from another feature branch. Otherwise the subagent infers the base automatically.

What happens if the security review subagent fails?▼

The skill inspects the failure, corrects invocation mistakes and retries once, or retries once with the same prompt for other failures. If the failure persists, it stops and reports the error instead of looping.

Related Skills

Explore More Software Engineering Skills→
Apostolos-DelisApostolos-Delis
1

create-pr

Stage, commit, push, and create a GitHub Pull Request with structured sections.

Community
Advanced
KYRIE66nbKYRIE66nb

code-review

Review code changes for security vulnerabilities, quality issues, and maintainability concerns.

Community
Advanced
eliottbusinesseliottbusiness

requesting-code-review

Automate pre-commit code review with static analysis and security scanning.

Community
Advanced
freire19freire19

security-audit

Audit codebases for vulnerabilities, insecure configurations, and dependency CVEs.

Community
Intermediate