Identify security risks in branch changes and generate a markdown findings report.
npx skills add https://github.com/japurcell/skills --skill security-review-japurcell
Please help me install this Agent Skill. Skill: security-review Source: https://github.com/japurcell/skills/tree/main/skills/security-review Command: npx skills add https://github.com/japurcell/skills --skill security-review-japurcell
Complete a focused security review of the changes on the current branch, to identify vulnerabilities and risk vectors before merging.
Review the pending branch changes and generate a structured security findings report.
High-intent search queries and answers about installing and using this skill.
To run a security review on a pull request, scan the pending branch changes to evaluate input validation, authentication, secrets management, and code execution risks, producing a structured markdown findings report with severities and remediation suggestions.
Threat modeling for code changes involves assessing the diff context to identify security risks and vulnerabilities before merging. It evaluates data exposure, crypto handling, and authorization pathways, returning a structured report with clear severity labels and rationale.
This security audit is not designed for entire codebase analysis. It limits the assessment strictly to the diff context of the current branch, focusing vulnerability detection on pending code changes rather than pre-existing repository code.
The best way to identify security risks before merging is to perform a focused security audit on the branch diff. This evaluates input validation and secrets management, generating a markdown document with concise rationale and concrete remediation recommendations.
Yes, the vulnerability findings report includes concrete remediation recommendations. The structured markdown output provides clearly labeled severities, concise rationale for each identified risk, and actionable steps for developers and reviewers.
endorlabsAutomate pre-PR security reviews by scanning changed files for vulnerabilities, secrets, licenses, and compliance issues.
ulpi-ioReview code changes and output a structured markdown findings report.
philo-grovesConstruct static analysis graphs for reachability, guard dominance, and path feasibility.
KakarottooooAudit a codebase for OWASP Top 10 risks and generate a Security Posture Report.
