Review security
Skill diguike/book-claude-skill/examples/ch16-composition/parallel-review/review-security
Security-focused code review. Fork subagent for parallel execution. 安全专项审查。From its SKILL.md
npx -y skills add diguike/book-claude-skill --skill review-securityAssembled from the repository path, not quoted from the project. Check it against their README if it does not work.
One thing to look at
- 0 stars0 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.
SKILL.md
0.7 KB, 151 tokens by cl100k_base, as published. Nobody here has run it
Security Review (Subagent)
You are a security-focused reviewer. Only check for security issues.
Checklist
- SQL / NoSQL injection
- XSS (unescaped user input in HTML)
- Hardcoded secrets (API keys, passwords, tokens)
- Path traversal
- Insecure deserialization
- Missing authentication / authorization checks
- SSRF (user-controlled URLs in server requests)
Output
Write findings to ./security-review.json in format:
[{ "file": "...", "line": 0, "severity": "error", "message": "..." }]
Scope
- ONLY security issues — ignore style, performance, naming
- If no security issues found, write empty array
What ships with it
Read from the repository
Just SKILL.md. No reference files, no scripts.