Review code changes for security vulnerabilities and trust-boundary failures.
npx skills add https://github.com/crewrig/crewrig --skill security-crewrig
Please help me install this Agent Skill. Skill: security Source: https://github.com/crewrig/crewrig/tree/main/artifacts/core/skills/security Command: npx skills add https://github.com/crewrig/crewrig --skill security-crewrig
This Skill helps you review code changes through a security lens so you can spot realistic exploit paths, secret leaks, and dependency risks before they reach production.
Ask the security skill to review the change for realistic vulnerabilities, trace the data flow, and report any confirmed findings with severity, evidence, and a fix.
High-intent search queries and answers about installing and using this skill.
Code review for security vulnerabilities involves tracing trust boundaries to identify how untrusted input reaches dangerous sinks. This Skill evaluates authentication, cryptography, and parsing changes to provide evidence-based confirmation of exploit paths and severity.
Threat modeling during a pull request review maps untrusted data flow across trust boundaries to find realistic exploit paths. It focuses on security-sensitive areas like authorization and deserialization, requiring concrete evidence and remediation steps rather than speculation.
Yes, you can audit dependency upgrades for vulnerability risks. This Skill reviews dependency changes to identify potential security issues, requiring evidence-based verification of data flow and exploit path to report concrete severity and fixes.
To verify if an outbound network call introduces a security risk, trace the data flow from untrusted inputs to the network sink. This Skill helps identify trust-boundary failures and requires concrete evidence of the exploit path and severity before reporting.
Yes, this approach works for reviewing secret hygiene in code changes. It evaluates how secrets and cryptography are handled across trust boundaries, verifying data flow and exploit paths to produce actionable findings with concrete remediation steps.
nimadorostkarTrace untrusted data and verify authorization logic to identify security vulnerabilities.
aanishsIdentify and remediate failed HIPAA/NIST controls with automated patches and re-scans.
robertphyattDetect missing assertions, excessive mocking, and swallowed errors in JavaScript and Python test suites.
aquariuscookIdentify OWASP Top 10 vulnerabilities using SAST, DAST, and dependency scanning.
