Audits pending code changes for vulnerabilities, secrets, and unsafe patterns.
npx skills add https://github.com/friedbotstudio/baseline --skill security-friedbotstudio
Please help me install this Agent Skill. Skill: security Source: https://github.com/friedbotstudio/baseline/tree/main/.claude/skills/security Command: npx skills add https://github.com/friedbotstudio/baseline --skill security-friedbotstudio
This Skill performs an evidence-based security review of pending code changes so teams can spot vulnerabilities, secret leakage, and unsafe design choices before merge.
Review the current branch’s changes for security issues and write the findings report to docs/security/<slug>-<date>.md.
High-intent search queries and answers about installing and using this skill.
To review a git diff for security vulnerabilities, this Skill audits pending branch changes for unsafe patterns, mapping exposure risks to OWASP and CWE identifiers, and generates a written report in docs/security.
Checking code changes for exposed secrets and dependency risks involves analyzing the current branch diff to detect hardcoded credentials and unsafe dependency additions, producing a structured triage report for release readiness.
This security review tool analyzes only the current branch diff and explicitly named files, keeping the vulnerability audit targeted and efficient without scanning the entire codebase or modifying code.
To map detected code vulnerabilities to CWE and OWASP standards during a code audit, this Skill evaluates implementation patterns in the branch diff and categorizes findings from Critical to Low for clear triage.
You can run an automated code audit for release readiness without altering source files by evaluating auth logic and input handling through diff-based analysis, outputting the findings to a markdown report.
A written security report for branch changes provides auditability and follow-up tracking by documenting secret exposure, dependency risks, and OWASP mapped vulnerabilities in a standardized docs/security file path.
anshul-garg27Identify code changes from diffs, PRs, or branches and run parallel security, performance, and quality reviews.
pskoettExecute headless CI scans for simplification, hardening, and documentation on pull requests.
dandudziAutomate SAST tool selection, configuration, and CI/CD integration.
rohanbhatia27Analyze code diffs and git history to detect security vulnerabilities and regressions.
