Git · Security review

Reviews code against a five-part checklist covering security, correctness, performance, maintainability and testing, and reports findings in a fixed format.

shareAI-lab/learn-claude-code

Analyze git repositories to build a security ownership topology (people-to-file), compute bus factor and sensitive-code ownership, and export CSV/JSON for graph databases and visualization.

trailofbits/skills-curated

Compares Trailmark code graphs at two snapshots, such as commits, tags or directories, to surface attack paths, blast radius and taint changes that text diffs miss.

trailofbits/skills

Pre-commit review: security scan, quality gates, auto-fix. An agent skill from HezaoHezao/poirot.

HezaoHezao/poirot

Security audit for web apps, especially AI-built ("vibe coded") ones.

benavlabs/vibe-check

Code review for the current change, before it is pushed. An agent skill from openqodex/openqodex.

openqodex/openqodex

Run the security-focused Skeptic persona on the local working tree's diff against a base branch.

RaoFoundation/subtensor

Scan code changes for security vulnerabilities using Bug Hunter-native artifacts and STRIDE context.

codexstar69/bug-hunter

结构化代码审查工作流，适用于显式 quick/full/security review；不负责普通实现或 bug 修复流程。

doccker/cc-use-exp

Review code for security vulnerabilities. An agent skill from kklimuk/docx-cli.

kklimuk/docx-cli

Automated triage and fixing of Dependabot security vulnerabilities (IN-1189).

linuxfoundation/insights

Reviews staged changes, a branch, a PR or a path for bugs, security gaps and performance issues, then writes an evidence-based report and creates Beads tasks.

maslennikov-ig/claude-code-orchestrator-kit

Security audit skill. An agent skill from blueberrycongee/termcanvas.

blueberrycongee/termcanvas

Scans a whole codebase or a set of changes for security issues, and turns findings into verified patch files that you apply yourself.

anthropics/claude-plugins-official

Deep analysis of Git history: identify frequently changed hotspot files, analyze code ownership by contributor, and scan for leaked secrets.

zebbern/claude-code-guide

Install local-first security hardening: pre-commit secret detection, offline dependency scans, static analysis, reports, and gated free CI.

luongnv89/skills

Compares before and after Trailmark graphs of a branch, pull request or release diff to flag new entry points, tainted paths, removed validation and other structural security regressions.

trailofbits/skills

Reviews a pull request, commit or diff for security problems, using git history, caller counts and test coverage, and writes a markdown report.

trailofbits/skills

Parallel read-only multi-agent review of a current git diff or explicit file scope to find behavioral regressions, security or privacy risks, performance or reliability issues, and contract or test…

Dimillian/Skills

PR review for DevOps changes — runs the generic /qv-pr-review flow then layers a structured GitHub Actions security audit (action pinning, permissions, OIDC, secrets handling).

tetherto/qvac

Perform a focused security review of pending git changes to identify high-confidence security vulnerabilities with real exploitation potential.

waybarrios/opencode-power-pack

Review code for bugs, security vulnerabilities, API misuse, consistency issues, simplicity problems, or test coverage gaps and low-value tests by running internal reviews and a peer review in…

tobihagemann/turbo

Security: review git changes for vulnerabilities, threat-model a system's attack surface, audit supply-chain risks.

notque/vexjoy-agent

A skill your agent uses to conduct aggressive, adversarial code reviews on git changes, branches, or PRs to detect critical edge cases, race conditions, security holes, and data loss risks.

WrongStack/WrongStack

Reviews code for quality, security, correctness. An agent skill from softspark/ai-toolkit.

softspark/ai-toolkit

Probe a target for directories that return auto-generated index listings instead of denying or serving a specific file — exposes the full file tree under any reachable directory, including files the…

jeremylongshore/tons-of-skills-marketplace

Security review via Codex exec. An agent skill from sd0xdev/sd0x-harness.

sd0xdev/sd0x-harness

Pull AWS Security Agent findings (penetration tests and code reviews) and drive remediation.

aws/agent-toolkit-for-aws

Audit Stella code, paths, or Git diffs for security defects affecting privileged legal data, tenant isolation, authentication, files, AI, and auditability.

stella/stella

Multi-dimensional LLM council review of an open PR (default) or a local feature branch (§ 8 branch mode, invoked via /gflow:branch-review).

ffroliva/gflow-cli

Full security audit for public repositories across 12 attack surfaces: git history, secrets, CI/CD, containers, dependencies, licenses.

Mathews-Tom/armory

发版自动化技能：CalVer 版本号 + 从 git log 生成 changelog + GitHub Releases。

312362115/claude

Focused security audit of code, calibrated to surface real exploitable bugs and suppress theoretical findings.

PostHog/posthog

Perform a security-focused review of current git changes. An agent skill from SpecterOps/skills.

SpecterOps/skills

Security Ownership Map workflow skill. An agent skill from diegosouzapw/awesome-omni-skills.

diegosouzapw/awesome-omni-skills

AI-powered security analysis of code changes — traces data flow, detects injection, auth bypass, secrets exposure, and unsafe deserialization across files.

danielvm-git/bigpowers

A skill your agent uses when writing skills, CLAUDE.md files, agent prompts, or any directives that involve shell commands, environment variables, API credentials, file creation, or git operations -…

ed3dai/ed3d-plugins

Performs a security-focused code review by launching multiple specialized agents and a verification agent to ensure comprehensive coverage and accurate findings.

bitwarden/ai-plugins