security-review

Reviews git/PR branch diffs for HIGH and MEDIUM exploitable vulnerabilities using read-only commands.

11|Updated Dec 26, 2025

Search Tags:#git #code analysis #vulnerability #security review #PR

Ready to run

npx skills add https://github.com/ethanolivertroy/my-agent-stuff --skill security-review-ethanolivertroy

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/ethanolivertroy/my-agent-stuff/tree/main/skills/security-review
Command: npx skills add https://github.com/ethanolivertroy/my-agent-stuff --skill security-review-ethanolivertroy

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires bash, read, grep, find, ls, subagent, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides a focused, high-signal security code review for git/PR branch changes, identifying newly introduced HIGH/MEDIUM vulnerabilities while filtering false positives.

Core Features & Use Cases

Security Code Review: Perform in-depth security reviews on git/PR changes.
Vulnerability Identification: Focus on HIGH/MEDIUM vulnerabilities and filter false positives.
Scope: Review diff against default remote branch, with read-only git commands.
Use Case: Use when reviewing a branch, PR, diff, or pending changes for security vulnerabilities.

Quick Start

Run the security-review skill to initiate a security code review of the current branch changes.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I conduct a security code review on a git PR diff?▼

Run a security review on your git PR diff to identify newly introduced HIGH and MEDIUM exploitable vulnerabilities. The review targets branch changes against the default remote branch and filters false positives for high-signal results.

What is the best way to find exploitable vulnerabilities in git branch changes?▼

Finding exploitable vulnerabilities in git branch changes is best handled by reviewing the diff against the default remote branch. This approach focuses strictly on HIGH and MEDIUM severity issues while filtering out false positives to ensure high-signal findings.

Does the security review process modify my git repository?▼

The security review process does not modify your repository because it uses read-only git commands. It safely reviews the diff against the default remote branch to identify security vulnerabilities without writing changes.

How do subagents filter false positives during a vulnerability review?▼

Subagents filter false positives during a vulnerability review by performing targeted analysis and filtering on the git diff. This mechanism ensures the final output highlights only HIGH and MEDIUM exploitable vulnerabilities introduced by the changes.

Can I use this to review pending changes for low severity security issues?▼

You cannot use this to review pending changes for low severity issues because the scope explicitly focuses on HIGH and MEDIUM exploitable vulnerabilities. It targets newly introduced security issues in git diffs while actively filtering other findings.