security-pr-reviewer - Security-focused review of code diffs and PRs
Reviews actual code diffs for security vulnerabilities, ranks findings with evidence, and delivers merge verdicts.
Tags
Updated: 2026-09-21Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Audit authentication and authorization controls
- Detect injection and mass assignment
- Scan for exposed secrets
- Identify weakened security controls
- Rank findings with exploit evidence
- Assess security test coverage
- Deliver code merge security verdicts
Inputs
- Git diff or Pull Request
- PR description and linked issues
- Surrounding codebase context
- Authorization matrix and tenant model
Outputs
- Structured security review report
- Merge decision verdict
Requirements
- Git CLI or GitHub CLI
- Access to target code repository
- Obtainable code diff