skills.rest
barichter
barichterCOMMUNITY
Explore all skills by this author →
GitHub

security-review

Automate pull request security reviews for secrets, file system, and environment variables.

Updated Apr 12, 2026
Search Tags:#CI/CD#GitHub Actions#security review#vulnerability detection#PR analysis
One-click install
npx skills add https://github.com/barichter/squad --skill security-review-barichter
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/barichter/squad/tree/main/.copilot/skills/security-review
Command: npx skills add https://github.com/barichter/squad --skill security-review-barichter

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automates the process of reviewing pull requests for security vulnerabilities, helping to identify and mitigate potential risks before they reach production.

Core Features & Use Cases

  • Automated Security Review: Systematically analyze PRs for common security issues such as secrets exposure, file system vulnerabilities, and improper use of environment variables.
  • Customizable Checklists: Apply a set of predefined security checklists or create custom ones to suit specific project needs.
  • Integration with GitHub Actions: Seamlessly integrate with GitHub Actions to run security reviews as part of the CI/CD pipeline.

Quick Start

Run the security-review skill on your PR to automatically check for security vulnerabilities.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate security reviews for pull requests in GitHub Actions?▼

Automate security reviews by integrating a skill into your GitHub Actions CI/CD pipeline to analyze pull requests for vulnerabilities like secret exposure and improper environment variable usage before merging.

What types of security vulnerabilities can PR analysis detect in CI/CD?▼

PR analysis in CI/CD can detect common security vulnerabilities including secret exposure, file system vulnerabilities, and the improper use of environment variables within your code changes.

How do I customize vulnerability detection checklists for my CI/CD pipeline?▼

Customize vulnerability detection by applying predefined security checklists or creating custom ones tailored to your specific project needs, ensuring your CI/CD pipeline enforces required security standards.

Does automated security review work with existing GitHub Actions workflows?▼

Automated security review integrates seamlessly with existing GitHub Actions workflows, allowing you to systematically analyze PRs and identify potential security risks as part of your standard CI/CD process.

What is the best way to prevent secret exposure in pull requests?▼

The best way to prevent secret exposure is to run an automated security review on every pull request, systematically scanning code changes to identify and mitigate exposed secrets before they reach production.

When should I use automated PR security checks in a software engineering workflow?▼

Use automated PR security checks when you need to identify and mitigate potential security risks early in your software engineering workflow, ensuring vulnerabilities are caught before reaching production.

Related Skills

Explore More Software Engineering Skills→
NourcineAbNourcineAb

github-workflow-automation

Automate GitHub Actions workflow creation and optimization for CI/CD management.

Community
Advanced
TalonT-OrgTalonT-Org
5

merge-pr

Merge GitHub pull requests into the integration branch with conflict reports.

Official
Advanced
dmarinsdmarins

ci-cd-and-automation

Automate CI/CD pipeline configuration and enforcement with GitHub Actions and Terraform.

Community
Advanced
kivo360kivo360
1

moai-domain-security

Mitigate security vulnerabilities in CI/CD pipelines using OWASP Top 10 and SAST/DAST workflows.

Community
Advanced