skills.rest
dceoy
dceoyCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

security-guidance

Identify potential vulnerabilities in source code, commits, and pull requests.

2|Updated Dec 31, 2025
Search Tags:#ci/cd#code review#security#deep learning#vulnerability analysis#security pattern
One-click install
npx skills add https://github.com/dceoy/ai-coding-agent-skills --skill security-guidance-dceoy
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-guidance
Source: https://github.com/dceoy/ai-coding-agent-skills/tree/main/skills/security-guidance
Command: npx skills add https://github.com/dceoy/ai-coding-agent-skills --skill security-guidance-dceoy

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires python3.9+, standard library, and includes scripts (resource) components.

What problem does it solve?

This Skill performs security-focused review of code changes, diffs, commits, and pull requests, identifying actionable vulnerabilities before they can impact the system.

Core Features & Use Cases

  • Security Pattern Analysis: Scans for dangerous APIs and risky configuration changes in the code.
  • Code Review Workflow: Provides a comprehensive multi-agent code review with pattern warnings and deep review capabilities.
  • Use Case: For organizations with CI/CD pipelines, use this Skill to ensure security during code deployments and mitigate the risk of vulnerabilities being introduced.

Quick Start

Execute the 'security-guidance' skill on the latest commit or pull request for a detailed security analysis.

Frequently Asked Questions about security-guidance

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a security-focused code review on pull requests?▼

Security-focused code review on pull requests is conducted by scanning diffs to identify and flag potential vulnerabilities. It uses a layered approach combining fast pattern checks for dangerous APIs with deep agent-based analysis.

What is layered vulnerability analysis in CI/CD pipelines?▼

Layered vulnerability analysis in CI/CD pipelines combines fast pattern checks for risky configuration changes with deep agent-based review. It identifies actionable security vulnerabilities in commits before deployment.

Does the security review skill work with Python 3.9 and standard library only?▼

Yes, the security review skill works with Python 3.9 and standard library only, requiring no external dependencies. It operates across diverse runtime environments using included scripts.

Can I scan commits for dangerous APIs and risky configuration changes?▼

Yes, you can scan commits for dangerous APIs and risky configuration changes through security pattern analysis. The review workflow flags these potential vulnerabilities in source code changes before deployment.

What's the best way to automate vulnerability analysis for code deployments?▼

The best way to automate vulnerability analysis for code deployments is integrating a multi-agent review process into CI/CD pipelines. This ensures security pattern analysis and deep review execute automatically on commits and pull requests.

Related Skills

Explore More Software Engineering Skills→
shankurshankur

review-security

Analyze local repository diffs to identify potential security vulnerabilities.

Community
Intermediate
SjdjdiejdrirhdkjejSjdjdiejdrirhdkjej

optimization-phase

Run post-implementation quality gates and generate reports before release.

Community
Advanced
AnveioAnveio
1

task-pull-request

Automate GitHub pull request creation, reviews, feedback, and merges via gh CLI.

Community
Intermediate
LuisSambranoLuisSambrano
7

code-review

Perform systematic code review and static analysis across multiple programming languages.

Community
Advanced