skills.rest
Terry-Mao
Terry-MaoCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

security-review-pr

Audit pull request diffs for security concerns and integrate findings into review.json.

144|16|Updated May 3, 2026
Search Tags:#code review#pull request#security#vulnerability assessment#security audit
One-click install
npx skills add https://github.com/Terry-Mao/AICodingFlow --skill security-review-pr-terry-mao
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-review-pr
Source: https://github.com/Terry-Mao/AICodingFlow/tree/main/.github/skills/security-review-pr
Command: npx skills add https://github.com/Terry-Mao/AICodingFlow --skill security-review-pr-terry-mao

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill automates the process of auditing pull request diffs for common security concerns, ensuring that potential vulnerabilities are identified and addressed before code is merged.

Core Features & Use Cases

  • Security Auditing: Audits pull request diffs for security concerns such as input validation, sanitization, authentication, authorization, secrets management, and unsafe dependencies.
  • Review Integration: Integrates with existing PR review processes, adding security findings to the same review.json produced by the base PR review.
  • Use Case: When reviewing code PRs, this Skill can be used to supplement the review-pr process, providing additional security insights.

Quick Start

Run the 'security-review-pr' skill on your pull request to automatically audit for security concerns.

Frequently Asked Questions about security-review-pr

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate a security audit for a pull request?▼

Yes, you can integrate security findings into your existing review process; this Skill adds security concerns directly into the base PR review output without generating separate reports.

How does a security audit integrate with an existing PR review process?▼

Yes, you can integrate security findings into your existing review process; this Skill adds security concerns directly into the base PR review output without generating separate reports.

Does the security review work with mixed code and non-code pull requests?▼

The security review does work with mixed pull requests, applying its security auditing capabilities to both code and mixed PR diffs to identify potential vulnerabilities.

What types of security vulnerabilities are checked during a PR diff audit?▼

A PR diff audit checks for security vulnerabilities including input validation, sanitization, authentication, authorization, secrets management, and unsafe dependencies.

Do I need a review contract to run a security audit on my pull request?▼

You do need a review contract to run a security audit on your pull request, as this Skill requires it to map findings into the existing review process without schema changes.

Related Skills

Explore More Software Engineering Skills→
warpdotdevwarpdotdev
292

security-review-pr

Identify security concerns in pull request diffs and merge findings into review.json.

Official
Advanced
SeanHoggSeanHogg
3

prepare-pr

Rebase a GitHub Pull Request onto main, fix review findings, run gates, and push.

Community
Advanced
jewbetchajewbetcha
115

code-reviewer

Analyze code across TypeScript, JavaScript, Python, Go, Swift, and Kotlin and generate structured PR feedback.

Community
Basic
0xRayAI0xRayAI

security-scan

Scan software projects for security vulnerabilities and generate risk reports.

Official
Intermediate