skills.rest
Cogni-AI-OU
Cogni-AI-OUOFFICIAL
Explore all skills by this author →
Website𝕏@Cogni_AI_OUGitHub

security-review

Analyze pull request diffs to detect security vulnerabilities in incremental changes.

3|1|Updated Apr 12, 2026
Search Tags:#diff analysis#pull request#input validation#secure coding#security review#GitHub PR#dependency risk
One-click install
npx skills add https://github.com/Cogni-AI-OU/cogni-ai-agent-skills --skill security-review-cogni-ai-ou
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/Cogni-AI-OU/cogni-ai-agent-skills/tree/main/security-review
Command: npx skills add https://github.com/Cogni-AI-OU/cogni-ai-agent-skills --skill security-review-cogni-ai-ou

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This skill helps you quickly identify security vulnerabilities introduced by specific Pull Request changes, without needing a full, time-consuming repository-wide security audit.

Core Features & Use Cases

  • Diff-centric PR review workflow: Prioritizes code added or modified in the current change set and checks for regression in existing controls.
  • Practical low-hanging checks: Flags common issues such as hardcoded secrets, risky new dependencies, and missing input validation at new entry points.
  • Security-logic verification: Encourages cross-checking auth/crypto-impacting changes against the stronger guidance from the related audit skill.
  • Actionable line-level feedback: Produces contextual comments directly on affected code locations and summarizes findings for PR decision-making.

Quick Start

Use the security-review skill to review the Pull Request changes by focusing on the diff, checking for secrets, vulnerable dependency additions, and new unsanitized inputs, then providing a concise PASS/FAIL/NEEDS ATTENTION report using the required report format.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check a pull request for security vulnerabilities in the diff?▼

To check a pull request for security vulnerabilities, perform a diff-scoped review focusing on incremental changes to detect hardcoded secrets, risky dependencies, and missing input validation at new entry points.

What is a diff-centric security review and when should I use it?▼

A diff-centric security review targets only the code added or modified in a pull request to catch regressions. Use it for quick PR assessments when a full repository-wide security audit is too time-consuming.

How do I identify hardcoded secrets and risky dependencies in GitHub PR changes?▼

Identify hardcoded secrets and risky dependencies in GitHub PR changes by applying low-hanging checks to the modified files, flagging unsanitized inputs at new entry points, and verifying auth logic.

Can I automate secure coding checks for specific files in a pull request?▼

Yes, you can automate secure coding checks for specific files by running command-driven security assessments that focus on the pull request diff, providing line-level feedback and a concise PASS or FAIL report.

Does a lightweight security review replace a full code audit?▼

No, a lightweight diff analysis does not replace a full code audit. It flags common issues in incremental changes but recommends cross-checking auth and crypto logic against stronger audit guidance for comprehensive coverage.

Related Skills

Explore More Software Engineering Skills→
ceejbotceejbot

rust-change-review

Review Rust diffs with evidence-cited findings and ranked fixes.

Community
Advanced
kcleto-aikcleto-ai
41

gos-critic-lp

Validate landing page folders against CRO, Anti-AI, Tailwind, and Footer quality gates.

Community
Advanced
marqus0004marqus0004

doc-sync

Synchronize repository documentation across CLAUDE.md and README.md indexes.

Community
Intermediate
wzh4464wzh4464
3

detect-vulnerability

Identify security vulnerabilities in git diffs using a multi-agent analysis pipeline.

Community
Advanced