security-review

Identify high-confidence security vulnerabilities in Git branch changes.

Updated Aug 23, 2026
One-click install
npx skills add https://github.com/otto-assistant/bridge --skill security-review-otto-assistant
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/otto-assistant/bridge/tree/main/cli/skills/security-review
Command: npx skills add https://github.com/otto-assistant/bridge --skill security-review-otto-assistant

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill provides a focused, security-centric review of code changes on the current branch, identifying high-confidence vulnerabilities before merges.

Core Features & Use Cases

  • Detects high-confidence security issues introduced by diffs, commits, and pull requests.
  • Traces data flow and privilege boundaries to surface auth, input validation, and exposure risks in modified code.
  • Delivers actionable remediation guidance and risk-rated findings to speed up secure PR merges.

Quick Start

Review the latest PR with the security-review skill to obtain a prioritized vulnerability report.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review a pull request for security vulnerabilities?

A security review for code changes identifies high-confidence vulnerabilities in diffs and commits. It traces data flow across privilege boundaries to surface authentication, authorization, and data leakage risks, delivering risk-rated findings with clear remediation guidance.

What is threat modeling in code review?

Threat modeling in code review involves analyzing modified files and diffs to identify high-confidence security vulnerabilities. It traces data flow and privilege boundaries to surface authentication, authorization, and data leakage risks in branch changes.

How do I check my git diff for data leakage risks?

To check your git diff for data leakage risks, review modified files and commits to trace data flow and identify exposure vulnerabilities. This security-focused review surfaces high-confidence findings with risk ratings and actionable remediation steps.

Can I detect authentication and authorization risks in branch commits?

Yes, you can detect authentication and authorization risks in branch commits by analyzing changed code and tracing data flow across privilege boundaries. This review surfaces high-confidence vulnerabilities with clear remediation steps to speed up secure PR merges.

Does this security review work with standard git workflows?

Yes, this security review applies across standard git workflows to analyze modified files, diffs, and commits. It identifies high-confidence vulnerabilities introduced by PR or branch changes and delivers risk-rated findings before merges.