security-review

Analyze code changes to identify security regressions and produce a markdown review.

1|Updated Mar 15, 2026
One-click install
npx skills add https://github.com/kennyolofsson23-netizen/claude-code-config --skill security-review-kennyolofsson23-netizen
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/kennyolofsson23-netizen/claude-code-config/tree/main/skills/security-review
Command: npx skills add https://github.com/kennyolofsson23-netizen/claude-code-config --skill security-review-kennyolofsson23-netizen

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Security-focused differential analysis that identifies regressions, prioritizes risk, and produces a concrete, evidence-backed markdown report so reviewers can decide whether to approve, block, or require remediations before merge or deployment.

Core Features & Use Cases

  • Risk-first differential review: focus on auth, crypto, payments, external calls, and validation changes.
  • Evidence-backed findings: per-file risk scoring, git blame for removed code, and test coverage checks.
  • Blast radius & adversarial modeling: count callers, classify impact, and build concrete exploit scenarios for high-risk changes.
  • Output-driven reporting: produce a structured markdown report with severity, file-level details, attack scenarios, and remediation recommendations for PRs, commit ranges, and pre-deploy diffs.
  • Use Case: Run on a pull request that touches authentication and payment code to surface regressions, calculate blast radius, and generate blocking remediation steps.

Quick Start

Run a security-focused differential review on PR 42 and produce a markdown report listing findings, severity, blast radius counts, test coverage status, and recommended remediations.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a security review on a pull request that touches authentication and payment code?▼

Run a security review by applying differential analysis to your pull request to identify regressions, calculate blast radius, and generate an evidence-backed markdown report with severity, attack scenarios, and remediation recommendations.

What is blast radius calculation in differential code analysis?▼

Blast radius calculation in differential code analysis counts callers of modified code and classifies impact severity to prioritize high-risk changes, helping reviewers decide whether to block or require remediations before merge.

Can I use git blame traces to find security regressions in removed code?▼

Git blame traces are used to track removed code during differential security reviews, providing evidence-backed findings that show exactly what was deleted and its potential impact on authentication, crypto, or payment logic.

How do I generate a markdown security report for pre-deployment diffs?▼

Generate a markdown security report for pre-deployment diffs by analyzing code changes, checking test coverage status, building adversarial attack scenarios for high-risk changes, and outputting concrete remediation recommendations.

Does this security review approach work with commit ranges or only full pull requests?▼

Differential security review works with pull requests, commit ranges, and pre-deployment diffs, applying risk-first analysis to changes affecting external calls, validation, and user-data handling to surface regressions.

What are the limitations of automated adversarial modeling for code changes?▼

Automated adversarial modeling focuses on high-risk changes by building concrete exploit scenarios, but reviewers must still interpret the generated attack scenarios and per-file risk scores to decide whether to approve or block a merge.