Claude MarketplacesSubmit
leonmelamud avatar

Code Security Audit

leonmelamud/claude-code-security-review

This runs security audits on code diffs, PRs, or branches with an emphasis on cutting false positives. It does a three-phase analysis (context research, pattern comparison, vulnerability assessment) and filters findings down to only high-confidence exploitable issues. Comes with GitHub Actions integration that can post inline PR comments, plus custom filtering rules and domain-specific scan templates for compliance or finserv workflows. The eval framework is nice: point it at any public PR to test against real code. The philosophy is refreshingly pragmatic: better to miss theoretical vulnerabilities than drown teams in noise. Only flags HIGH and MEDIUM severity issues with 8+ confidence scores.

skills.sh installs
446
GitHub stars
2
last updated
Jun 3, 2026
View on GitHub

Install

$ npx -y skills add leonmelamud/claude-code-security-review --skill code-security-audit --agent claude-code

Installs into .claude/skills of the current project.

Files

Code Security Audit

AI-powered security audit for code changes with false positive filtering. Based on claude-code-security-review.

Bundled Resources

SKILL.md on GitHub

Sponsors

Promote your product hereReach 125k+ visitors monthlyPromote your product hereReach 125k+ visitors monthlyAgent CaffeineSponsoredClose your lid, come back to finished workSnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthlyWaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthlyknobsSponsoredSee your site on any phone, any day, in any language

Details

Repository
github.com/leonmelamud/claude-code-security-review
Categories
Security, Git & Pull Requests, Code Review & Quality
First seen
Jun 3, 2026

Recommended

More Security
1aradotso avatarcodex-oauth-automation-extensionaradotso/trending-skillscodex oauth automation extension400skills.sh installs
2bobmatnyc avatarbetter-auth-authenticationbobmatnyc/claude-mpm-skillsBetter Auth authentication flows for TypeScript apps. Use when enabling email/password auth, configuring social providers, or implementing sign-up, sign-in, and398skills.sh installs
3levnikolaevich avatarln-760-security-setuplevnikolaevich/claude-code-skillsSets up security scanning for secrets and dependency vulnerabilities. Use when adding security infrastructure to a project.382skills.sh installs
4bobmatnyc avatarsecurity-scanningbobmatnyc/claude-mpm-skillsCI security scanning: secrets, deps, SAST, triage, expiring exceptions377skills.sh installs
5alinaqi avatarsecurityalinaqi/claude-bootstrapsecurity315skills.sh installs
6cinience avataralicloud-security-kmscinience/alicloud-skillsManage Alibaba Cloud Key Management Service (KMS) via OpenAPI/SDK. Use whenever the user needs key lifecycle/resource operations, policy/configuration changes, 267skills.sh installs