skills.rest
agents-repo
agents-repoOFFICIAL
Explore all skills by this author →
WebsiteGitHub

maiconfz--review-fix-ship--security-reviewer

Reviews scoped git diffs for injection, secrets, authz, and supply-chain risks.

3|1|Updated May 2, 2026
Search Tags:#code review#security review#supply-chain#vulnerability detection#cursor#git diff#secrets detection
One-click install
npx skills add https://github.com/agents-repo/registry --skill maiconfz-review-fix-ship-security-reviewer-agents-repo
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: maiconfz--review-fix-ship--security-reviewer
Source: https://github.com/agents-repo/registry/tree/main/.cursor/skills/maiconfz/review-fix-ship/maiconfz--review-fix-ship--security-reviewer
Command: npx skills add https://github.com/agents-repo/registry --skill maiconfz-review-fix-ship-security-reviewer-agents-repo

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Code changes can introduce security vulnerabilities like injection flaws, leaked secrets, missing authorization checks, or supply-chain risks that are easy to miss during manual review. This Skill performs a focused security review of the scoped git diff and reports findings sorted by severity. ## Core Features & Use Cases - Scoped Diff Security Review: Analyzes branch changes or uncommitted changes for injection, secret leakage, missing authz, unsafe defaults, and install-script or supply-chain risk. - Subagent or Fallback Execution: Launches the Cursor security-review Task subagent when available, with a single retry policy, and falls back to an equivalent in-package review otherwise. - Structured Findings Output: Emits a findings table sorted by severity with Severity | Location | Finding columns, or a one-line no-issues status. - Use Case: Before merging a pull request, run a security review of the branch changes to catch a hardcoded API key or an unparameterized SQL query, then hand the findings table to the author for fixes. ## Quick Start Ask the agent to run a security review of the current branch changes and report any findings as a severity-sorted table.

Frequently Asked Questions about maiconfz--review-fix-ship--security-reviewer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a security review on my git diff before merging?▼

Invoke the skill with the default branch-changes diff to review all changes relative to the merge-base with the default branch. It returns a findings table sorted by severity with file and line locations, or a one-line status if no issues are found.

What security issues does a git diff security review check for?▼

The review checks for injection flaws, leaked secrets, missing authorization checks, unsafe defaults, and install-script or supply-chain risk in the changed code. Findings are reported with severity, location, and a description.

Can I review only uncommitted changes instead of the whole branch?▼

Yes, pass uncommitted-changes as the diff input to scope the review to your working tree changes. The default is branch-changes, which covers the merge-base diff against the default branch.

Does the security review skill modify or fix my code?▼

No, the skill is review-only and must not edit, create, or delete files, nor commit or push. It also does not write exploits or proof-of-concept attack code; it only reports findings for a human or another agent to fix.

What happens if the Cursor security-review subagent is unavailable?▼

The skill falls back to an equivalent in-package review of the same scoped diff covering the same risk categories. The fallback does not claim to be the Cursor Security Review subagent and still produces the standard findings table.

Related Skills

Explore More Software Engineering Skills→
danielsuguimotodanielsuguimoto

commit-and-push

Commits staged and unstaged changes with generated messages and pushes to the remote branch.

Community
Intermediate
prthikprthik
1

code-review

Review code changes for quality, security, and maintainability issues.

Community
Advanced
DataDogDataDog
648

lint

Run Hatch-based lint, format, and quality checks on modified files.

Official
Advanced
doctordukedoctorduke

security-scanning-suite

Automate SAST, DAST, dependency, secret, and container security scans.

Community
Advanced