security-review — Skills — getagentictools

What it does

Scanning a codebase or file for security vulnerabilities

Running a security review or vulnerability check

Checking for SQL injection, XSS, command injection, or other injection flaws

Finding exposed API keys, hardcoded secrets, or credentials in code

Auditing dependencies for known CVEs

Reviewing authentication, authorization, or access control logic

Detecting insecure cryptography or weak randomness

security review

Source

Repository: https://github.com/github/awesome-copilot

security-review FAQ

What does the security-review skill do?

AI-powered codebase security scanner that reasons about code like a security researcher — tracing data flows, understanding component interactions, and catching vulnerabilities that pattern-matching tools miss. Use this skill when asked to scan code for security vulnerabilities, find bugs, check for SQL injection, XSS, command injection, exposed API keys, hardcoded secrets, insecure dependencies, access control issues, or any request like "is my code secure?", "review for security issues", "audit this codebase", or "check for vulnerabilities". Covers injection flaws, authentication and access control bugs, secrets exposure, weak cryptography, insecure dependencies, and business logic issues across JavaScript, TypeScript, Python, Java, PHP, Go, Ruby, and Rust. Scanning a codebase or file for security vulnerabilities Running a security review or vulnerability check

What does security-review require?

6. Requires human approval — nothing is auto-applied; you always review first Search patterns: API key, token, private key, connection string, entropy, .env, GitHub Actions, Docker, Terraform Configuration keys: SSRF, BOLA, IDOR, CSRF.

How do I install security-review?

Run: npx -y skills add https://github.com/github/awesome-copilot --skill security-review --agent claude-code — the source lives at github.com/github/awesome-copilot.

Maintain security-review?

Let people know it's listed here — add the badge (live metrics, light/dark aware) or a plain link to your README or docs.

[security-review on getagentictools](https://getagentictools.com/skills/github-awesome-copilot-security-review?ref=badge)

npx agentictools info skills/github-awesome-copilot-security-review

The second line is the CLI lookup for this page — handy in READMEs and docs.