security-review

Audit git branch diffs for high-confidence exploitable vulnerabilities.

Updated Jun 8, 2026
One-click install
npx skills add https://github.com/ScarletFish/MyAnimeDock --skill security-review-scarletfish
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/ScarletFish/MyAnimeDock/tree/main/.agents/skills/security-review
Command: npx skills add https://github.com/ScarletFish/MyAnimeDock --skill security-review-scarletfish

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill addresses the difficulty of manually auditing code changes for critical security flaws, helping developers identify exploitable vulnerabilities before they reach production.

Core Features & Use Cases

  • Focused Security Audit: Performs a multi-pass analysis on git diffs to detect high-confidence vulnerabilities like injection, auth bypass, and data exposure.
  • Exploit-Scenario Validation: Filters out theoretical noise by requiring a concrete, actionable attack path for every reported finding.
  • Use Case: Use this before merging a pull request that modifies authentication logic or input handling to ensure no critical security regressions were introduced.

Quick Start

Run the security-review skill to audit the pending changes on your current git branch for potential vulnerabilities.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit git diffs for security vulnerabilities before merging?

To audit git diffs for security vulnerabilities, run a focused security review on your current branch. This process analyzes pending changes to identify high-confidence flaws with real exploitation potential before they reach production.

What is a multi-pass security audit for false positive reduction?

A multi-pass security audit applies a structured methodology to analyze code changes, filtering out theoretical risks and false positives. It ensures only vulnerabilities with concrete, actionable attack paths are reported.

Can I use this security review for pre-merge validation on authentication logic?

Yes, you can use this security review for pre-merge validation on authentication logic. It is specifically designed to detect critical security regressions like injection, auth bypass, and data exposure in modified input handling.

Does the vulnerability scanning require git access to analyze branch changes?

Yes, vulnerability scanning requires git access to analyze branch changes. It needs to read the diffs of pending code modifications to perform its focused security audit and validate exploit scenarios.

Why does this code review filter out theoretical security risks?

This code review filters out theoretical security risks through exploit-scenario validation. It requires a concrete, actionable attack path for every reported finding to reduce noise and highlight real exploitation potential.

What is the best way to identify high-confidence security vulnerabilities in pull requests?

The best way to identify high-confidence security vulnerabilities in pull requests is performing a focused security audit on the modified code. This validates exploitable flaws and ensures no critical security regressions were introduced.