skills.rest
jayteealao
jayteealaoCOMMUNITY
Explore all skills by this author →
GitHub

review:security

Orchestrate senior-review-specialist agent to apply five security checklists and produce structured reports.

Updated Dec 29, 2025
Search Tags:#security#threat-modeling#supply-chain#privacy#code-review#infrastructure-security
One-click install
npx skills add https://github.com/jayteealao/Aperture --skill review-security-jayteealao
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: review:security
Source: https://github.com/jayteealao/Aperture/tree/main/.claude/skills/review-security
Command: npx skills add https://github.com/jayteealao/Aperture --skill review-security-jayteealao

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill enables automated, comprehensive security reviews for code changes by coordinating a senior-review-specialist agent, ensuring vulnerabilities, privacy concerns, and supply-chain risks are identified.

Core Features & Use Cases

  • Five-checklist methodology: Applies five predefined security checklists (vulnerabilities, privacy, infra security, data integrity, supply chain) to every change.
  • Threat surface mapping: Identifies entry points, trust boundaries, and assets at risk across the codebase and deployment.
  • Use Case: When evaluating a PR, run this Skill to generate a security report highlighting critical findings and remediation steps.

Quick Start

Spawn the senior-review-specialist agent to begin the security review. Then load and apply the five checklists and generate a structured report.

Frequently Asked Questions about review:security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate security code reviews for pull requests?▼

Automate security code reviews by spawning a senior-review-specialist agent that reads diffs and applies five predefined checklists covering vulnerabilities, privacy, infrastructure, data integrity, and supply chain to generate a structured report.

What does threat surface mapping cover in a codebase deployment review?▼

Threat surface mapping in a security review identifies entry points, trust boundaries, and assets at risk across the codebase and deployment to highlight critical findings and remediation steps.

Can I run a supply chain and privacy assessment on infrastructure changes?▼

Yes, you can assess supply chain and privacy risks by applying the predefined checklists to codebase and deployment changes, evaluating vulnerabilities and data integrity across the modified infrastructure.

How to generate a structured security report from code diffs?▼

Generate a structured security report by loading code diffs into the senior-review-specialist agent, applying the five security checklists, and producing an output highlighting critical findings and remediation steps.

What is included in the five-checklist methodology for software security reviews?▼

The five-checklist methodology for security reviews includes vulnerability detection, privacy assessment, infrastructure security, data integrity verification, and supply chain risk evaluation applied to every code change.

Does the security review require any external dependencies or tools?▼

No, the security review skill has no external dependencies and operates by spawning the internal senior-review-specialist agent to apply checklists and produce the final structured security report.

Related Skills

Explore More Software Engineering Skills→
jayteealaojayteealao

review:infra

Execute six infrastructure checklists and produce a structured review report.

Community
Advanced
adaptive-enforcement-labadaptive-enforcement-lab
3

secure

Scan code, dependencies, and containers for vulnerabilities and generate SBOMs.

Official
Advanced
BagelHoleBagelHole
46

sast-scanning

Performs static security testing on source code using Semgrep, CodeQL, and SonarQube.

Community
Intermediate
huangwb8huangwb8
47

security-specialist

Identify and mitigate security risks through threat modeling and compliance checks.

Community
Advanced