security-review

Identify security vulnerabilities and best-practice gaps in pull requests.

Updated Apr 15, 2026
One-click install
npx skills add https://github.com/AAbdulghany/fms --skill security-review-aabdulghany
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/AAbdulghany/fms/tree/main/.claude/skills/security-review
Command: npx skills add https://github.com/AAbdulghany/fms --skill security-review-aabdulghany

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

PRs often contain security vulnerabilities that go unnoticed during rapid development; this skill provides automated and manual security checks to surface weaknesses, enforce best practices, and guide remediation.

Core Features & Use Cases

  • Automated security checklist: runs the Security Reviewer agent (Shield) to identify common vulnerabilities (in authentication, data handling, API security) and flag risky patterns.
  • Human approval gate & escalation: routes findings to designated security roles for review, escalation to Head of Security for strategic decisions, and involvement of penetration testers when needed.
  • Auditable remediation & trends: persists findings to a shared audit-history system and renders trend insights to track security posture across PRs.

Quick Start

Review a PR for security issues and generate a prioritized remediation report immediately.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I identify security vulnerabilities in a pull request?

Security vulnerabilities in a pull request are identified through automated and manual checks targeting authentication, authorization, data handling, API security, and Secrets management to surface risky patterns and best-practice gaps.

What is the best way to enforce a security review checklist before merging code?

The best way to enforce a security review checklist is by applying an automated security reviewer that flags risky patterns, routing findings to designated security roles as a human approval gate, and escalating strategic decisions to the Head of Security.

Can I use automated security checks for common languages and frameworks?

Yes, automated security checks can be applied across common languages and frameworks to detect common vulnerabilities in authentication, data handling, API security, and Secrets management during pull request reviews.

How do I generate an auditable history of security findings for governance?

To generate an auditable history of security findings for governance, persist structured findings with severity and remediation guidance to a shared audit-history system and render trend insights to track security posture across PRs.

Does security review for PRs include remediation guidance for flagged issues?

Yes, security review for PRs returns a structured set of findings that includes severity levels and specific remediation guidance to help developers fix vulnerabilities and enforce best practices.

When should I escalate a security vulnerability found in a code review?

A security vulnerability found in a code review should be escalated to the Head of Security for strategic decisions or involve penetration testers when the automated checks flag high-risk patterns requiring specialized manual intervention.