security-review

Analyze pull request diffs and metadata to identify high-confidence security issues.

2|1|Updated Jan 26, 2026
One-click install
npx skills add https://github.com/TrevorEdris/fellowship-of-the-workflows --skill security-review-trevoredris
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/TrevorEdris/fellowship-of-the-workflows/tree/main/workflows/skills/security-review
Command: npx skills add https://github.com/TrevorEdris/fellowship-of-the-workflows --skill security-review-trevoredris

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

## What problem does it solve? This Skill helps security teams and developers identify HIGH-CONFIDENCE vulnerabilities in code changes during PR reviews, reducing the risk of security incidents in production.

## Core Features & Use Cases

  • Automated PR security review: Analyzes diffs and pull request metadata to surface high-confidence issues.
  • Context-aware guidance: Leverages Anthropic's claude-code-security-review methodology to minimize false positives.
  • Use Case: When reviewing a PR, generate a prioritized list of findings with actionable remediation steps for fast remediation.

### Quick Start

  1. Invoke the skill on a PR diff to generate a security report.
  2. Review and apply recommended fixes, then re-run validation.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I identify high-confidence security vulnerabilities in a pull request?

To identify high-confidence security vulnerabilities in a pull request, analyze the code diffs, metadata, and commits to surface actionable findings with over 80% confidence. This process generates a structured report containing prioritized risks and specific remediation steps.

Can I automate security code review for pull request diffs?

You can automate security code review for pull request diffs by integrating automated analysis into your CI workflows. This approach examines pull request metadata and changes to minimize false positives while surfacing high-confidence security issues.

What is the best way to prioritize security risks found during PR diff analysis?

The best way to prioritize security risks found during PR diff analysis is to generate a structured report that categorizes findings by confidence level. This provides developers with a prioritized list of actionable risks and recommended remediation steps.

Does automated PR security review work across different repositories and CI workflows?

Automated PR security review applies to pull requests across repositories and CI workflows. It analyzes diffs and metadata to identify high-confidence issues, reducing the risk of security incidents in production environments.

How do I minimize false positives when running a security review on code changes?

To minimize false positives when running a security review on code changes, apply context-aware analysis that leverages established security review methodologies. This ensures only high-confidence issues are surfaced for remediation.