security-review

Identify security vulnerabilities and best-practice gaps in pull requests.

Updated Apr 15, 2026
One-click install
npx skills add https://github.com/AAbdulghany/fms --skill security-review-aabdulghany
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/AAbdulghany/fms/tree/main/.claude/skills/security-review
Command: npx skills add https://github.com/AAbdulghany/fms --skill security-review-aabdulghany

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

PRs often contain security vulnerabilities that go unnoticed during rapid development; this skill provides automated and manual security checks to surface weaknesses, enforce best practices, and guide remediation.

Core Features & Use Cases

  • Automated security checklist: runs the Security Reviewer agent (Shield) to identify common vulnerabilities (in authentication, data handling, API security) and flag risky patterns.
  • Human approval gate & escalation: routes findings to designated security roles for review, escalation to Head of Security for strategic decisions, and involvement of penetration testers when needed.
  • Auditable remediation & trends: persists findings to a shared audit-history system and renders trend insights to track security posture across PRs.

Quick Start

Review a PR for security issues and generate a prioritized remediation report immediately.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I identify security vulnerabilities in a pull request?▼

Security vulnerabilities in a pull request are identified through automated and manual checks targeting authentication, authorization, data handling, API security, and Secrets management to surface risky patterns and best-practice gaps.

What is the best way to enforce a security review checklist before merging code?▼

The best way to enforce a security review checklist is by applying an automated security reviewer that flags risky patterns, routing findings to designated security roles as a human approval gate, and escalating strategic decisions to the Head of Security.

Can I use automated security checks for common languages and frameworks?▼

Yes, automated security checks can be applied across common languages and frameworks to detect common vulnerabilities in authentication, data handling, API security, and Secrets management during pull request reviews.

How do I generate an auditable history of security findings for governance?▼

To generate an auditable history of security findings for governance, persist structured findings with severity and remediation guidance to a shared audit-history system and render trend insights to track security posture across PRs.

Does security review for PRs include remediation guidance for flagged issues?▼

Yes, security review for PRs returns a structured set of findings that includes severity levels and specific remediation guidance to help developers fix vulnerabilities and enforce best practices.

When should I escalate a security vulnerability found in a code review?▼

A security vulnerability found in a code review should be escalated to the Head of Security for strategic decisions or involve penetration testers when the automated checks flag high-risk patterns requiring specialized manual intervention.