review-security

Analyze code for security vulnerabilities and compliance risks with fitness scores.

3|Updated Feb 21, 2026

Search Tags:#code review #security #vulnerability #audit #compliance #risk assessment

Ready to run

npx skills add https://github.com/jeffabailey/skills --skill review-security-jeffabailey

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: review-security
Source: https://github.com/jeffabailey/skills/tree/main/src/review-security
Command: npx skills add https://github.com/jeffabailey/skills --skill review-security-jeffabailey

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill identifies and scores potential security vulnerabilities in your codebase, helping you proactively address risks before they can be exploited.

Core Features & Use Cases

Vulnerability Analysis: Scans code for common security flaws across input validation, authentication, data protection, dependencies, and cryptography.
Fitness Scoring: Provides a 1-10 score for key security dimensions, highlighting areas needing improvement.
Use Case: Before deploying a new feature, run this Skill to get a security fitness score and a prioritized list of vulnerabilities to fix, ensuring your application is robust against attacks.

Quick Start

Use the review-security skill to analyze the current project for security vulnerabilities.

Frequently Asked Questions about review-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I check my code for security vulnerabilities before shipping?▼

To check code for security vulnerabilities before shipping, run a security review to analyze input validation, authentication, data protection, and cryptography, producing 1-10 fitness scores. This highlights areas needing improvement to ensure robustness against attacks.

What is security fitness scoring and how does it assess compliance risks?▼

Security fitness scoring evaluates code across input validation, authentication, dependency security, and cryptography, assigning 1-10 scores to assess compliance risks. It proactively identifies potential exploitable flaws before deployment by reporting findings with high confidence.

How do I audit my project for authentication and data protection security issues?▼

To audit your project for authentication and data protection security issues, initiate a vulnerability analysis scan. It evaluates these specific dimensions, scoring them from 1-10 to highlight vulnerabilities and compliance risks that require immediate remediation.

Does the security vulnerability audit report all findings or filter by confidence?▼

The security vulnerability audit filters findings, only reporting security issues with a confidence score of 7/10 or higher. This ensures the vulnerability analysis output prioritizes high-probability compliance risks and code flaws across cryptography and error handling.

When should I run a code review for security risks in my development workflow?▼

You should run a code review for security risks before deploying a new feature or shipping code. This proactively identifies input validation flaws and dependency vulnerabilities, providing a prioritized list of fixes to ensure application robustness.