security-review

Identify high-confidence security vulnerabilities in Git branch changes.

Updated Aug 23, 2026
One-click install
npx skills add https://github.com/otto-assistant/bridge --skill security-review-otto-assistant
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/otto-assistant/bridge/tree/main/cli/skills/security-review
Command: npx skills add https://github.com/otto-assistant/bridge --skill security-review-otto-assistant

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill provides a focused, security-centric review of code changes on the current branch, identifying high-confidence vulnerabilities before merges.

Core Features & Use Cases

  • Detects high-confidence security issues introduced by diffs, commits, and pull requests.
  • Traces data flow and privilege boundaries to surface auth, input validation, and exposure risks in modified code.
  • Delivers actionable remediation guidance and risk-rated findings to speed up secure PR merges.

Quick Start

Review the latest PR with the security-review skill to obtain a prioritized vulnerability report.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review a pull request for security vulnerabilities?▼

A security review for code changes identifies high-confidence vulnerabilities in diffs and commits. It traces data flow across privilege boundaries to surface authentication, authorization, and data leakage risks, delivering risk-rated findings with clear remediation guidance.

What is threat modeling in code review?▼

Threat modeling in code review involves analyzing modified files and diffs to identify high-confidence security vulnerabilities. It traces data flow and privilege boundaries to surface authentication, authorization, and data leakage risks in branch changes.

How do I check my git diff for data leakage risks?▼

To check your git diff for data leakage risks, review modified files and commits to trace data flow and identify exposure vulnerabilities. This security-focused review surfaces high-confidence findings with risk ratings and actionable remediation steps.

Can I detect authentication and authorization risks in branch commits?▼

Yes, you can detect authentication and authorization risks in branch commits by analyzing changed code and tracing data flow across privilege boundaries. This review surfaces high-confidence vulnerabilities with clear remediation steps to speed up secure PR merges.

Does this security review work with standard git workflows?▼

Yes, this security review applies across standard git workflows to analyze modified files, diffs, and commits. It identifies high-confidence vulnerabilities introduced by PR or branch changes and delivers risk-rated findings before merges.