skills.rest
acta0724
acta0724COMMUNITY
Explore all skills by this author →
GitHub

security-review

Analyze code changes and pull requests for security vulnerabilities.

Updated Feb 14, 2026
Search Tags:#code review#security#vulnerability#audit#devsecops#threat detection
One-click install
npx skills add https://github.com/acta0724/claude-marketplace --skill security-review-acta0724
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/acta0724/claude-marketplace/tree/main/wf/skills/security-review
Command: npx skills add https://github.com/acta0724/claude-marketplace --skill security-review-acta0724

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill addresses the critical need for identifying and mitigating security vulnerabilities in code changes before they are merged, reducing the risk of breaches and ensuring code integrity.

Core Features & Use Cases

  • Automated Security Audits: Scans code for common and critical security flaws.
  • Vulnerability Categorization: Classifies detected issues by severity (CRITICAL, HIGH, MEDIUM).
  • Actionable Recommendations: Provides specific suggestions for fixing identified vulnerabilities.
  • Use Case: Before deploying a new feature, run this skill to automatically check for hardcoded secrets, injection flaws, and improper access controls, receiving a clear report on any issues found.

Quick Start

Use the security-review skill to audit the code changes in the current pull request.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect security vulnerabilities in a pull request?▼

Security review skills automatically analyze pull requests to detect vulnerabilities like hardcoded secrets and injection flaws. They provide categorized reports by severity and suggest remediation steps to ensure code integrity.

What types of code security flaws can automated audits identify?▼

Automated security audits identify critical code flaws like hardcoded secrets, injection vulnerabilities, and authorization issues. They classify detected threats by severity levels including CRITICAL, HIGH, and MEDIUM to prioritize fixes.

How do I get actionable remediation steps for detected injection vulnerabilities?▼

To get remediation steps for injection vulnerabilities, run a security review on your code changes. The analysis generates a categorized report providing specific suggestions for fixing the identified security flaws.

Does automated code review work for DevSecOps threat detection before deployment?▼

Automated code review supports DevSecOps threat detection by scanning feature branches before deployment. It checks for hardcoded secrets and access control issues, delivering a clear report to mitigate breach risks.

How are security audit findings categorized for prioritization?▼

Security audit findings are categorized by severity levels, specifically CRITICAL, HIGH, and MEDIUM. This classification helps developers prioritize remediation efforts for vulnerabilities detected during code reviews.

Related Skills

Explore More Software Engineering Skills→
atholaathola
326

diff-analysis

Categorize git diffs, assess risks, and prepare release notes.

Community
Advanced
jpoleyjpoley
50

security-fixer

Generate secure patches for code vulnerabilities and output unified diffs.

Community
Intermediate
gaoqiongxiegaoqiongxie
1

security-audit

Audit codebases for OWASP Top 10 vulnerabilities and hardcoded secrets.

Community
Advanced
not-subhunot-subhu

security-scan

Orchestrate dependency audits, static application security testing, and privacy dataflow analysis.

Community
Advanced