Security Reviewer
The security-reviewer skill identifies security vulnerabilities in code and infrastructure by conducting SAST scans, dependency audits, secrets scanning, and penetration testing, then generates structured audit reports with severity ratings and actionable remediation guidance. It serves security analysts, DevSecOps engineers, and compliance teams who need to systematically assess code, cloud environments, and infrastructure for security risks. The skill solves the problem of organizing and prioritizing security findings across multiple scanning tools by providing standardized vulnerability reports, exploitability validation, and compliance checklists with clear remediation steps.
- install copies · 90 days. Times the install command was copied on this site in the last 90 days, bots filtered.
- 5
- skills.sh installs
- 6.5K
- GitHub stars
- 12.3K
- last updated
- Aug 21, 2026
Install
$ npx -y skills add jeffallan/claude-skills --skill security-reviewer --agent claude-codeInstalls into .claude/skills of the current project.
Files
Security Reviewer
Security analyst specializing in code review, vulnerability identification, penetration testing, and infrastructure security.
When to Use This Skill
- Code review and SAST scanning
- Vulnerability scanning and dependency audits
- Secrets scanning and credential detection
- Penetration testing and reconnaissance
- Infrastructure and cloud security audits
- DevSecOps pipelines and compliance automation
Core Workflow
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageDetails
- Repository
- github.com/jeffallan/claude-skills
- Categories
- Testing & QA, Security, Cloud & Infrastructure
More from jeffallan/claude-skills
All 66- Fastapi Expert6.4K
- Javascript Pro6.4K
- Database Optimizer6.3K
- Java Architect6.2K
- Nestjs Expert6.2K
- Pandas Pro6.1K
- Nextjs Developer6K
- Code Documenter6K
- Monitoring Expert6K
- Fullstack Guardian5.9K
- Prompt Engineer5.9K
- React Expert5.8K
- Terraform Engineer5.7K
- Test Master5.7K
- Cpp Pro5.6K
- Playwright Expert5.6K
- Kotlin Specialist5.4K
- Secure Code Guardian5.4K
- Debugging Wizard5.4K
- Sre Engineer5.4K
- Shopify Expert5.3K
- Microservices Architect5.2K
- React Native Expert5.2K
- Cli Developer5.1K
Recommended
More Testing & QA
exporting-rds-to-s3aws/agent-toolkit-for-awsExports Amazon RDS or Aurora database snapshots to Amazon S3 in Apache Parquet format for analytics, backup, or data migration. Handles snapshot selection or cr6.5Kskills.sh installs
cro-methodologywondelai/skillsAudit websites and landing pages for conversion issues and design evidence-based A/B tests. Use when the user mentions "landing page isnt converting", "conversi6.4Kskills.sh installs
platform-data-manageforcedotcom/sf-skillsSalesforce data operations with 130-point scoring. Use this skill to create, update, delete, bulk import/export, generate test data, and clean up org records us6.3Kskills.sh installsaws-lambda-durable-functionsaws/agent-toolkit-for-awsBuilds resilient, long-running, multi-step applications with AWS Lambda durable functions with automatic state persistence, retry logic, and orchestration for l6.2Kskills.sh installs
web-scrapingjamditis/claude-skills-journalismAuthorized web content extraction with trust-boundary controls, scraping cascades, poison-pill detection, browser rendering, observed API analysis, and social-m6.2Kskills.sh installs
nodemcollina/skillsProvides domain-specific best practices for Node.js development with TypeScript, covering type stripping, async patterns, error handling, streams, modules, test6.1Kskills.sh installs