skills.rest
sartoris-digital
sartoris-digitalOFFICIAL
Explore all skills by this author →
GitHub

security-review

Audit code changes for exploitable security vulnerabilities with multi-agent validation.

Updated Mar 11, 2026
Search Tags:#code review#security#vulnerability#audit#threat modeling#penetration testing
One-click install
npx skills add https://github.com/sartoris-digital/pi-superpowers --skill security-review-sartoris-digital
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/sartoris-digital/pi-superpowers/tree/main/skills/security-review
Command: npx skills add https://github.com/sartoris-digital/pi-superpowers --skill security-review-sartoris-digital

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill automates the identification of exploitable security vulnerabilities in code changes, reducing the risk of deploying insecure software and minimizing false positives.

Core Features & Use Cases

  • Multi-Agent Audit: Leverages specialized agents for context gathering, security analysis, and validation.
  • Vulnerability Identification: Detects common security flaws like injection, auth issues, and data exposure.
  • Use Case: Before merging a critical update to your authentication module, run this skill to perform a thorough security audit, ensuring no new vulnerabilities are introduced.

Quick Start

Run a security review on the current code changes.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run an automated security vulnerability audit on my code changes?▼

To run a security vulnerability audit, you can trigger this skill to analyze your code changes. It performs a multi-agent review that gathers context, analyzes code against security patterns, and validates findings to identify exploitable flaws with minimal false positives.

What is multi-agent security code review and how does it reduce false positives?▼

Multi-agent security code review uses specialized agents for context gathering, analysis, and validation. By filtering known false positives and validating findings with parallel issue validators, it ensures high confidence in detected vulnerabilities before reporting.

Can I customize the security audit to exclude specific files or add my own instructions?▼

Yes, you can customize the security audit by applying project-specific files. These files allow you to set custom instructions and configure exclusions to tailor the vulnerability detection to your project's unique requirements.

Does automated security review work for detecting injection and authentication vulnerabilities?▼

Automated security review effectively detects common security flaws including injection vulnerabilities, authentication issues, and data exposure. It analyzes code changes against established security patterns to catch these risks before deployment.

What is the best way to perform threat modeling and penetration testing analysis on new code commits?▼

The best way to analyze new code commits for threats is using an automated multi-agent audit. It identifies exploitable vulnerabilities with high confidence by validating findings against security patterns, reducing the risk of deploying insecure software.

Related Skills

Explore More Software Engineering Skills→
racurryracurry
1

markdown-quality

Apply markdownlint rules with opinionated overrides to Markdown documents.

Community
Intermediate
mzniumzniu
7

tech_evaluation

Assess technology readiness, scalability, security, and architectural risks in a structured report.

Community
Advanced
TECHKNOWMAD-LABSTECHKNOWMAD-LABS

security-audit

Scan code repositories for vulnerabilities and leaked secrets using static analysis tools.

Official
Advanced
zangxin75zangxin75

security-reviewer

Conduct security audits and code vulnerability reviews with SAST scans.

Community
Advanced