security-review

Identifies vulnerabilities in authentication, security, and middleware code changes.

31|2|Updated Apr 21, 2026
One-click install
npx skills add https://github.com/vonchitzki/claude-project-template --skill security-review-vonchitzki
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/vonchitzki/claude-project-template/tree/main/.claude/skills/security-review
Command: npx skills add https://github.com/vonchitzki/claude-project-template --skill security-review-vonchitzki

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill prevents security vulnerabilities from reaching production by providing an automated, consistent review layer for sensitive code changes.

Core Features & Use Cases

  • Automated Vulnerability Detection: Scans for common risks like injection, IDOR, and hard-coded secrets.
  • Workflow Guardrails: Enforces security checks on critical paths like authentication and middleware.
  • Use Case: When a developer modifies an authentication controller, the skill automatically flags potential authorization bypasses before the code is merged.

Quick Start

Run the security-review skill on the current directory to audit all recent changes for potential vulnerabilities.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automatically detect security vulnerabilities in code during a pull request?

Automated security vulnerability detection scans source code modifications during pull requests to identify injection risks, insecure defaults, and credential exposure before merging. It analyzes changes to authentication, security, and middleware components to ensure compliance by blocking workflows until critical findings are resolved.

What is automated source code security auditing and how does it prevent authorization bypasses?

Automated source code security auditing is a consistent review layer that prevents vulnerabilities from reaching production. It analyzes modifications to authentication controllers and middleware to automatically flag potential authorization bypasses, ensuring sensitive code changes meet security compliance standards before merging.

Can I use automated code review to scan for hard-coded secrets and injection risks?

Yes, automated code review scans for common security risks including hard-coded secrets, injection vulnerabilities, and insecure defaults. It operates during pull requests or manual triggers to detect credential exposure and enforces security checks on critical paths like authentication and middleware components.

Does automated security analysis block workflows when critical compliance findings are detected?

Yes, automated security analysis blocks workflows when critical compliance findings are detected. It enforces security checks on sensitive code changes by ensuring critical vulnerabilities in authentication and middleware components are fully resolved before allowing the workflow to proceed to production.

How do I audit recent code changes for IDOR and credential exposure vulnerabilities?

To audit recent code changes for IDOR and credential exposure, run an automated security scan on the current directory. This detects common risks like insecure defaults and injection vulnerabilities by analyzing modifications to security and middleware components, ensuring compliance with security standards.