Now liveThe Skillselion MCP - thousands of ranked skills, loaded into your agent mid-task. No install.Get it →

dilaz/security-review-skill

1 skill · 71 installs · 7 stars · GitHub

Install

npx skills add https://github.com/dilaz/security-review-skill

Skills in this repo

1Security Reviewsecurity-review is an agent skill for solo builders who cannot afford “maybe vulnerable” noise before they ship SaaS, APIs, or CLI tools that touch user data. It encodes a strict workflow: start with automated scanners, deepen with manual code review focused on input handling, subprocesses, filesystem access, and outbound requests, and treat every suspected issue as unproven until you write and run a proof-of-concept exploit. That Iron Law keeps your agent from flooding you with theoretical CVE chatter and instead produces a short list of demonstrated risks with severity labels. It pairs naturally with code review skills for logic bugs but goes further into attacker mindset. Use it when hardening a feature branch, responding to a security ask, or validating a dependency-heavy integration before launch—not for everyday refactors with no trust boundary.71installs

Five minutes, every Monday - the tools, releases and tactics for developers.

unsubscribe anytime.