Run a security review checklist on code changes before merging PRs.
npx skills add https://github.com/Tvshreyas/DISTILL --skill security-review-tvshreyas
Please help me install this Agent Skill. Skill: Security Review Source: https://github.com/Tvshreyas/DISTILL/tree/main/.agent/skills/security-review Command: npx skills add https://github.com/Tvshreyas/DISTILL --skill security-review-tvshreyas
Run a security review checklist on code changes before they ship, ensuring code quality, security, and compliance.
Review the latest code change by running the security review checklist to verify authentication, input handling, and infrastructure safeguards.
High-intent search queries and answers about installing and using this skill.
To run a security review before merging, apply an automated checklist to your PR workflows that validates authentication, data handling, and infrastructure safeguards. This process enforces zero TypeScript errors, zero ESLint errors, and no high or critical vulnerabilities.
An automated code security review checks PRs for authentication and authorization gaps, improper input handling, data privacy exposures, and infrastructure issues. It also verifies safe handling of secrets and scans dependencies for high or critical vulnerabilities.
Yes, you can use automated security checks to enforce zero TypeScript errors and zero ESLint errors. The review process validates type safety and linting status before merging to ensure code quality and compliance across application PR workflows.
You need to scan dependencies for vulnerabilities in your PR workflow before code changes ship. Running a security review checklist catches high and critical vulnerabilities early, ensuring sensitive data is not exposed and API routes are secured before merging.
Yes, the automated security review works for API routes and sensitive data handling by validating that API routes are secured and sensitive data is not exposed. It applies these infrastructure and data privacy safeguards across application PR workflows before changes ship.
The best way to catch authentication and infrastructure issues before shipping code is running an automated security review checklist on PRs. This enforces type safety, linting, and vulnerability scans while verifying safe handling of secrets and data privacy safeguards.
ArogyaReddyConfigure Semgrep, SonarQube, and CodeQL for multi-language CI/CD security scanning.
matthiaskloftMonitor GitHub Pull Request CI status, apply automated fixes, and merge when checks pass.
xlelibertyPerform offensive security assessments with vulnerability scanning and penetration testing.
endorlabsAutomate pre-PR security reviews by scanning changed files for vulnerabilities, secrets, licenses, and compliance issues.
