security-review

Analyze code changes to identify security regressions and produce a markdown review.

1|Updated Mar 15, 2026
One-click install
npx skills add https://github.com/kennyolofsson23-netizen/claude-code-config --skill security-review-kennyolofsson23-netizen
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/kennyolofsson23-netizen/claude-code-config/tree/main/skills/security-review
Command: npx skills add https://github.com/kennyolofsson23-netizen/claude-code-config --skill security-review-kennyolofsson23-netizen

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Security-focused differential analysis that identifies regressions, prioritizes risk, and produces a concrete, evidence-backed markdown report so reviewers can decide whether to approve, block, or require remediations before merge or deployment.

Core Features & Use Cases

  • Risk-first differential review: focus on auth, crypto, payments, external calls, and validation changes.
  • Evidence-backed findings: per-file risk scoring, git blame for removed code, and test coverage checks.
  • Blast radius & adversarial modeling: count callers, classify impact, and build concrete exploit scenarios for high-risk changes.
  • Output-driven reporting: produce a structured markdown report with severity, file-level details, attack scenarios, and remediation recommendations for PRs, commit ranges, and pre-deploy diffs.
  • Use Case: Run on a pull request that touches authentication and payment code to surface regressions, calculate blast radius, and generate blocking remediation steps.

Quick Start

Run a security-focused differential review on PR 42 and produce a markdown report listing findings, severity, blast radius counts, test coverage status, and recommended remediations.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a security review on a pull request that touches authentication and payment code?

Run a security review by applying differential analysis to your pull request to identify regressions, calculate blast radius, and generate an evidence-backed markdown report with severity, attack scenarios, and remediation recommendations.

What is blast radius calculation in differential code analysis?

Blast radius calculation in differential code analysis counts callers of modified code and classifies impact severity to prioritize high-risk changes, helping reviewers decide whether to block or require remediations before merge.

Can I use git blame traces to find security regressions in removed code?

Git blame traces are used to track removed code during differential security reviews, providing evidence-backed findings that show exactly what was deleted and its potential impact on authentication, crypto, or payment logic.

How do I generate a markdown security report for pre-deployment diffs?

Generate a markdown security report for pre-deployment diffs by analyzing code changes, checking test coverage status, building adversarial attack scenarios for high-risk changes, and outputting concrete remediation recommendations.

Does this security review approach work with commit ranges or only full pull requests?

Differential security review works with pull requests, commit ranges, and pre-deployment diffs, applying risk-first analysis to changes affecting external calls, validation, and user-data handling to surface regressions.

What are the limitations of automated adversarial modeling for code changes?

Automated adversarial modeling focuses on high-risk changes by building concrete exploit scenarios, but reviewers must still interpret the generated attack scenarios and per-file risk scores to decide whether to approve or block a merge.