security-review

Identify security weaknesses in code changes and configurations.

Updated Mar 28, 2026

Search Tags:#security #dependencies #secrets #vulnerabilities #code-review #auth

Ready to run

npx skills add https://github.com/mechemsi/claude-template --skill security-review-mechemsi

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/mechemsi/claude-template/tree/main/skills/security-review
Command: npx skills add https://github.com/mechemsi/claude-template --skill security-review-mechemsi

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Identify security weaknesses in code changes and configurations to prevent vulnerabilities from reaching production.

Core Features & Use Cases

Automated checklists for authentication, authorization, input validation, and data exposure.
Secrets & dependencies scanning to detect hardcoded keys and vulnerable libraries.
PR/scope coverage to assess security across modules, APIs, and deployment workflows.
Use Case: Before merging a PR affecting sensitive code paths (auth, payments, or user data), run a security review to surface risks and recommended fixes.

Quick Start

Prompt Claude to perform a security review on the specified changes or modules to produce a prioritized findings report.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I run a security review on code changes before merging a pull request?▼

Run a security review on code changes by prompting Claude to assess the specified modules or PRs, which produces a prioritized findings report. This surfaces risks across sensitive code paths like authentication, payments, and user data before production deployment.

What does an automated security check for code typically cover?▼

An automated security check covers authentication and authorization checks, input validation, data exposure minimization, secrets management, API endpoints, and deployment pipeline configurations. It also scans for hardcoded keys and vulnerable dependencies.

When do I need to perform a security review on my APIs and deployment pipelines?▼

Perform a security review on APIs and deployment pipelines before merging changes that affect sensitive code paths or alter configurations. This ensures compliance with security best practices and prevents vulnerabilities from reaching production.

Can I detect hardcoded secrets and vulnerable dependencies using a code review?▼

Yes, code review can detect hardcoded secrets and vulnerable dependencies through dedicated scanning. It identifies exposed keys and unsafe libraries, providing recommended fixes to ensure secure storage and safe dependency usage.

What is the best way to check input validation and data exposure in my modules?▼

The best way to check input validation and data exposure is applying an automated security checklist to your modules. This systematically assesses whether minimal data is exposed and inputs are properly validated against security best practices.

Does this security review support authentication and authorization checks across different projects?▼

Yes, this security review supports authentication and authorization checks across different projects and PRs. It evaluates access controls and compliance with security best practices regardless of the specific project scope.