Analyze code changes to identify vulnerabilities and map attack surfaces.
npx skills add https://github.com/mcouthon/agents --skill security-review-mcouthon
Please help me install this Agent Skill. Skill: security-review Source: https://github.com/mcouthon/agents/tree/main/.github/skills/security-review Command: npx skills add https://github.com/mcouthon/agents --skill security-review-mcouthon
This Security Review skill helps teams identify vulnerabilities and trust issues in code changes before merge by systematically analyzing changes and mapping attack surfaces.
Review the latest PR for security issues and map its attack surface to produce a prioritized list of findings.
High-intent search queries and answers about installing and using this skill.
To map the attack surface of a pull request, you need a systematic security analysis of code changes. This process identifies vulnerabilities and maps potential entry points to produce a prioritized, structured review output guiding remediation.
Threat modeling in a security code review systematically identifies vulnerabilities across inputs, auth, data exposure, injection, and cryptography. It maps the attack surface of code changes to classify risks and guide structured remediation before merge.
To classify security vulnerabilities during a code audit, apply a risk classification system using HIGH, MEDIUM, and LOW levels. This prioritizes findings based on the mapped attack surface and structured review outputs.
Yes, the security review covers injection and data exposure vulnerabilities. It applies a comprehensive security checklist analyzing inputs, authentication, data exposure, injection points, and cryptography to map attack surfaces.
You can use this for security audits on existing codebases and PR reviews. It performs systematic security analysis to identify vulnerabilities and map attack surfaces across various codebase contexts, not just pre-merge changes.
AlbertLin821Analyze pull request diffs to map code changes to affected execution flows.
pluginagentmarketplaceIdentify and analyze AI/LLM vulnerabilities via structured threat modeling and attack surface analysis.
AkbarDevopAudit infrastructure security for leaked credentials, supply chain risks, and CI/CD issues.
MaxMiksaReview Python FastAPI and React code against OWASP Top 10 vulnerabilities.
