security-review

Run a security review on your git PR diff to identify newly introduced HIGH and MEDIUM exploitable vulnerabilities. The review targets branch changes against the default remote branch and filters false positives for high-signal results.

Finding exploitable vulnerabilities in git branch changes is best handled by reviewing the diff against the default remote branch. This approach focuses strictly on HIGH and MEDIUM severity issues while filtering out false positives to ensure high-signal findings.

The security review process does not modify your repository because it uses read-only git commands. It safely reviews the diff against the default remote branch to identify security vulnerabilities without writing changes.

Subagents filter false positives during a vulnerability review by performing targeted analysis and filtering on the git diff. This mechanism ensures the final output highlights only HIGH and MEDIUM exploitable vulnerabilities introduced by the changes.

You cannot use this to review pending changes for low severity issues because the scope explicitly focuses on HIGH and MEDIUM exploitable vulnerabilities. It targets newly introduced security issues in git diffs while actively filtering other findings.