security-review — Skills — getagentictools

What it does

Report on: Only the specific file, diff, or code provided by the user

Research: The ENTIRE codebase to build confidence before reporting

Where does this input actually come from? (Trace data flow)

Is there validation/sanitization elsewhere?

How is this configured? (Check settings, config files, middleware)

What framework protections exist?

Test files (unless explicitly reviewing test security)

Requirements & configuration

| MEDIUM | Vulnerable pattern, input source unclear | Note as "Needs verification" |

Code paths that require prior authentication to reach (note the auth requirement instead)

random.random() for token # FLAG: Security tokens need secrets module

Needs Verification

Question: [What needs to be verified]

Configuration: BASE_URLSELECT

security review

Source

Repository: https://github.com/getsentry/skills

security-review FAQ

What does the security-review skill do?

Security code review for vulnerabilities. Use when asked to "security review", "find vulnerabilities", "check for security issues", "audit security", "OWASP review", or review code for injection, XSS, authentication, authorization, cryptography issues. Provides systematic review with confidence-based reporting. Report on: Only the specific file, diff, or code provided by the user Research: The ENTIRE codebase to build confidence before reporting

What does security-review require?

| MEDIUM | Vulnerable pattern, input source unclear | Note as "Needs verification" | Code paths that require prior authentication to reach (note the auth requirement instead) random.random() for token # FLAG: Security tokens need secrets module Needs Verification Question: [What needs to be verified] Configuration keys: BASE_URL, SELECT.

How do I install security-review?

Run: npx -y skills add https://github.com/getsentry/skills --skill security-review --agent claude-code — the source lives at github.com/getsentry/skills.

Maintain security-review?

Let people know it's listed here — add the badge (live metrics, light/dark aware) or a plain link to your README or docs.

[![security-review on getagentictools](https://getagentictools.com/badge/skills/getsentry-skills-security-review.svg)](https://getagentictools.com/skills/getsentry-skills-security-review?ref=badge)

npx agentictools info skills/getsentry-skills-security-review

The second line is the CLI lookup for this page — handy in READMEs and docs.