Security Review Action
- 1 installs
- 821 repo stars
- Updated March 23, 2026
- paperclipai/companies
Runs automated 3-phase security review on every pull request via GitHub Actions, posting only confidence >= 0.8 findings as PR comments and optionally blocking merge on HIGH severity.
About
A GitHub Actions workflow that runs the same 3-phase security methodology on every pull request, posting only findings with confidence at or above 0.8 as PR comments. A developer uses it to add CI-integrated security review that can block merges on HIGH severity.
- Confidence-gated PR comments (>= 0.8)
- Can block merge on HIGH severity findings
Security Review Action by the numbers
- 1 all-time installs (skills.sh)
- Ranked #1,835 of 2,203 Security skills by installs in the Skillselion catalog
- Data as of Aug 5, 2026 (Skillselion catalog sync)
npx skills add https://github.com/paperclipai/companies --skill security-review-actionAdd your badge
Show developers this skill is listed on Skillselion. Paste this into your README.
| Installs | 1 |
|---|---|
| repo stars | ★ 821 |
| Last updated | March 23, 2026 |
| Repository | paperclipai/companies ↗ |
What it does
Runs automated 3-phase security review on every pull request via GitHub Actions, posting only confidence >= 0.8 findings as PR comments and optionally blocking merge on HIGH severity.
Files
GitHub Actions workflow configuration for running automated security reviews on every pull request. Applies the same 3-phase security methodology with false-positive filtering and confidence scoring. Only posts findings with confidence >= 0.8 as PR comments. Can block merge on HIGH severity findings. Use when setting up or maintaining CI-integrated security review pipelines.
Related skills
Entra App RegistrationCorrectly register an application in Microsoft Entra ID, configure OAuth 2.0 flows, request the right API permissions, and generate working MSAL authentication snippets484k1.3kAzure ComplianceRun automated Azure compliance scans, security posture checks, and Key Vault expiration audits before deploying.484k1.3k
Openclaw Secure Linux CloudDeploy and harden an OpenClaw agent instance on a Linux cloud server following battle-tested security defaults.270k72
Better Auth Best PracticesCorrectly configure Better Auth for secure authentication with database adapters, sessions, OAuth, email/password, and plugins in TypeScript projects.80.9k206
Firebase Security Rules AuditorAutomatically audit Firebase Firestore security rules for bypass vulnerabilities and logic gaps before deploying.80.4k397
Audit WebsiteRun comprehensive audits that surface SEO, performance, security, technical, and content issues with LLM-optimized reports and health scores.65.6k85