What problem does it solve?
This skill solves the critical gap of missing exploitable security vulnerabilities during standard code reviews, which can lead to costly data breaches and system compromises in production environments.
Core Features & Use Cases
- Targeted High-Risk Focus: Automatically activates when code diffs touch authentication middleware, public API endpoints, user input handling, or permission checks to prioritize the most vulnerable areas of code.
- Attacker-Perspective Analysis: Reviews code by tracing potential attack paths from untrusted input entry points to dangerous sinks, rather than running generic compliance checklists that miss real-world exploit paths.
- Confidence-Calibrated Findings: Reports only actionable security issues with clear confidence ratings, filtering out low-probability theoretical attacks and generic hardening advice to reduce review noise.
Use case: For example, when a developer modifies a user authentication endpoint, this skill will trace if user-supplied input is properly sanitized to prevent SQL injection, auth bypass, or privilege escalation attacks.
Quick Start
Use the security-reviewer skill to analyze the current code diff for exploitable security vulnerabilities in authentication, public endpoints, and user input handling logic.
