Claude MarketplacesSubmit
github avatar

Security Review

github/awesome-copilotOfficial

This goes beyond pattern matching to reason about code the way a security researcher would, tracing data flows across files and catching vulnerabilities that grep won't find. It covers the usual suspects (SQL injection, XSS, command injection, exposed secrets) plus access control bugs, weak crypto, and business logic flaws across eight languages. Every finding includes severity ratings, exploitation context, and a concrete patch you review before applying. The workflow is thorough: dependency audit first, then secrets scan, then deep vulnerability analysis with cross-file tracing, followed by a self-verification pass to filter false positives. If you've ever wanted a second pair of eyes that actually understands what your code does, not just what it looks like, this is worth running before you ship.

install copies · 90 days. Times the install command was copied on this site in the last 90 days, bots filtered.
13
skills.sh installs
5.8K
GitHub stars
41K
last updated
Aug 21, 2026
View on GitHub

Install

$ npx -y skills add github/awesome-copilot --skill security-review --agent claude-code

Installs into .claude/skills of the current project.

Files

Security Review

An AI-powered security scanner that reasons about your codebase the way a human security researcher would — tracing data flows, understanding component interactions, and catching vulnerabilities that pattern-matching tools miss.

When to Use This Skill

Use this skill when the request involves:

  • Scanning a codebase or file for security vulnerabilities
  • Running a security review or vulnerability check
  • Checking for SQL injection, XSS, command injection, or other injection flaws
  • Finding exposed API keys, hardcoded secrets, or credentials in code
  • Auditing dependencies for known CVEs
  • Reviewing authentication, authorization, or access control logic
  • Detecting insecure cryptography or weak randomness
  • Performing a data flow analysis to trace user input to dangerous sinks
  • Any request phrasing like "is my code secure?", "scan this file", or "check my repo for vulnerabilities"
  • Running /security-review or /security-review <path>

How This Skill Works

SKILL.md on GitHub

Sponsors

Promote your product hereReach 125k+ visitors monthlyPromote your product hereReach 125k+ visitors monthlyAgent CaffeineSponsoredClose your lid, come back to finished workSnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthlyWaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthlyknobsSponsoredSee your site on any phone, any day, in any language

Details

Repository
github.com/github/awesome-copilot
Categories
Frontend Development, Backend & APIs, Security, Git & Pull Requests, Code Review & Quality, AI & Agent Building, Python, Rust, Java & JVM, PHP & Laravel, Databases
First seen
May 16, 2026

More from github/awesome-copilot

All 318

Recommended

More Frontend Development
1affaan-m avatarvite-patternsaffaan-m/eccVite build tool patterns including config, plugins, HMR, env variables, proxy setup, SSR, library mode, dependency pre-bundling, and build optimization. Activat5.8Kskills.sh installs
2samber avatarlinkedin-ghostwritingsamber/cc-skillsB2B LinkedIn ghostwriting — strategic interview, hook engineering, and post body. Use when the user wants to write LinkedIn content, create ghostwritten posts, 5.8Kskills.sh installs
3vinvcn avatargit-guardrails-claude-codevinvcn/mattpocock-skills-zh-cn设置 Claude Code hooks，在危险 git commands（push、reset --hard、clean、branch -D 等）执行前阻止它们。适用于用户想防止破坏性 git 操作、添加 git safety hooks，或在 Claude Code 中阻止 git push/reset 时。5.7Kskills.sh installs
4affaan-m avatardart-flutter-patternsaffaan-m/eccProduction-ready Dart and Flutter patterns covering null safety, immutable state, async composition, widget architecture, popular state management frameworks (B5.7Kskills.sh installs
5vinvcn avatarsetup-pre-commitvinvcn/mattpocock-skills-zh-cn在当前仓库设置 Husky pre-commit hooks，集成 lint-staged (Prettier)、类型检查和测试。适用于用户想添加 pre-commit hooks、设置 Husky、配置 lint-staged，或在提交时运行格式化、类型检查和测试时。5.7Kskills.sh installs
6affaan-m avatarecc-guideaffaan-m/eccGuide users through ECC's current agents, skills, commands, hooks, rules, install profiles, and project onboarding by reading the live repository surface before5.5Kskills.sh installs