security-review

Estrellas8

Forks2

Actualizado16 de febrero de 2026 a las 10:39

Run an OWASP-focused security analysis on code changes.

Instalación

Instalar con Codex o Claude Copia este prompt, pégalo en Codex, Claude u otro asistente, y deja que revise la página de la skill y la instale por ti.

Fuente

bis-code

bis-code/claude-toolkit

Abrir repositorio de GitHub Ver repositorios del creador

Descarga

Ocupaciones relacionadasSOC

Basado en la clasificación ocupacional SOC

Analistas de seguridad de la informaciónOcupaciones informáticas y matemáticas·SOC 15-1212

SKILL.md

readonly

name	security-review
description	Run an OWASP-focused security analysis on code changes.

/security-review

Spawns the security-reviewer agent to perform a structured security analysis of your code changes.

Steps

Gather context — detect the scope of the security review:
- If arguments are provided (file paths or PR number), scope to those
- Otherwise, use git diff to determine changed files
- Identify files touching auth, API endpoints, input handling, or secrets
Spawn the agent — use the Task tool:
```
Task tool with subagent_type="security-reviewer"
```
Pass in the prompt:
- The diff or file contents to review
- The list of changed files with categories (auth, API, data handling)
- The project's language and framework for context-specific checks
Present findings — relay the agent's security report:
- Group by severity: CRITICAL > HIGH > MEDIUM > LOW
- Include exploit scenarios for each finding
- Show recommended fixes with code references
- Report secrets detection and dependency audit results
Offer follow-up actions:
- "Fix critical issues?" — apply recommended security fixes
- "Create issues for non-critical findings?" — track as GitHub issues
- "Run dependency audit?" — check for known CVEs in dependencies

Más de este repositorio

mismo repositorio

agent-creator

bis-code/claude-toolkit

Interactive agent builder: guides the user through defining a new agent as a behavioral spec, then generates the agent .md and installs it.

2026-05-298

deep-dive

bis-code/claude-toolkit

Cross-repo investigation: research planning issues, break down into sub-issues, generate ralph session prompts per repo.

2026-05-298

bis-code/claude-toolkit

Three-phase QA orchestrator: parallel scan, interactive triage, guided fix.

2026-05-298

ralph

bis-code/claude-toolkit

Interactive feature builder with subagent delegation and approval gates.

2026-05-298

rule-creator

bis-code/claude-toolkit

Interactive rule builder: guides the user through defining a new rule as a constraint doc, then generates the rule .md and installs it.

2026-05-298

skill-creator

bis-code/claude-toolkit

Interactive skill builder: guides the user through defining a new skill as a structured SOP, then generates the SKILL.md and installs it.

2026-05-298

name	security-review
description	Run an OWASP-focused security analysis on code changes.

/security-review

Spawns the security-reviewer agent to perform a structured security analysis of your code changes.

Steps

Gather context — detect the scope of the security review:
- If arguments are provided (file paths or PR number), scope to those
- Otherwise, use git diff to determine changed files
- Identify files touching auth, API endpoints, input handling, or secrets
Spawn the agent — use the Task tool:
```
Task tool with subagent_type="security-reviewer"
```
Pass in the prompt:
- The diff or file contents to review
- The list of changed files with categories (auth, API, data handling)
- The project's language and framework for context-specific checks
Present findings — relay the agent's security report:
- Group by severity: CRITICAL > HIGH > MEDIUM > LOW
- Include exploit scenarios for each finding
- Show recommended fixes with code references
- Report secrets detection and dependency audit results
Offer follow-up actions:
- "Fix critical issues?" — apply recommended security fixes
- "Create issues for non-critical findings?" — track as GitHub issues
- "Run dependency audit?" — check for known CVEs in dependencies