Skills
Security Review Skill
by Anthropic
Anthropic's reference security-review skill. Walks a diff, flags real issues, ignores the noise.
Our verdict
We have not reviewed Security Review Skill yet
No one at Enterprise DNA has checked this listing against its sources. The description comes from public listings gathered automatically. Any fact below shows where it came from and when it was last checked.
From the listing
About Security Review Skill
Security Review is shipped in Anthropic's reference skills repo and is the cleanest answer for an agent-driven pre-merge check. It walks a diff in context, flags issues by severity, and writes a structured review the team can act on without security-engineer hand-holding.
Best for
Engineering teams without a dedicated security reviewer in the loop
Use cases
- Pre-merge security review on every PR
- Targeted review of a single auth or payments change
- Standalone security pass after a refactor
- Baseline check for non-security engineers shipping risky code
Notes
Why it matters
Most teams never get a second pair of eyes on a security-sensitive change. A skill the agent runs every time closes a hole most orgs would not fix.
How teams use it in production
Wire as a slash command on PR open. Output goes as a structured comment. Engineers triage flags by severity. Real security reviewers see only the high-severity flags.
What to watch
The next step is an agent that opens the follow-up PR for the flagged issues, not just writes them up.
Pros
- Reproducible structured output instead of vibes-based review
- Calibrated to flag real risk, not 'best practice' noise
- Pairs cleanly with GitHub MCP for an end-to-end PR loop
- Forks well for org-specific review checklists
Cons
- Cannot replace a real human review on greenfield auth
- Multi-file architecture issues still get missed
- Org-specific compliance needs a forked variant
Key facts
What we have checked
- Days since the last commit
- 0
- GitHub forks
- 22,204
- GitHub stars
- 188,286
- Days to a first reply on issues
- 7.3
- Open issues
- 432
- Releases in the last 90 days
- 0
Each value shows when we last confirmed it and where it came from. Values we have not confirmed are left out, never guessed.
Stars and usage
How Security Review Skill is growing
185,752 to 188,286
Health and security
Is Security Review Skill looked after, and what do its setup files show
Health score
75 out of 100
| Part | Points | What we saw |
|---|---|---|
| Recent activity | 30 of 30 | Last push 0 days ago |
| Releases | 0 of 15 | 0 releases in 90 days |
| Issue replies | Not counted | The latest check has no issue response reading (fewer than 3 measured issues, or issues switched off) |
| Maintainer | 15 of 15 | Owned by an organisation |
| Official source | Not counted | MCP servers only |
Alternatives
Alternatives to Security Review Skill
| Record | Type | How we know | Checked |
|---|---|---|---|
| PR-AgentThis is an alternative to it | App | Named in the listing | Not dated |
| security-reviewerThis is an alternative to it | Skill | Matched from the listing text |
Compare
Compare Security Review Skill side by side
Sources
Where this comes from
- GitHubRegistry
A source shows what was published when we checked it. It does not certify security, performance or a working installation. Read our method.
Changelog
What changed
No changes recorded yet. Releases, price changes and deprecations appear here, with their dates, once we track them for this record.
Open-source & AI alternatives
Swap-in tools that solve the same job. Weigh the trade-offs before you commit.
Pairs with
Other entries in the index that connect to this one. Click through to see the chain.
secure-code-guardian
Jeffallan
67 Specialized Skills for Full-Stack Developers. Transform Claude Code into your expert pair programmer.
security-and-hardening
addyosmani
Production-grade engineering skills for AI coding agents.
security-audit
cloudflare
A coding-agent skill for multi-phase security audits with independently verified, machine-readable findings
security-reviewer
Jeffallan
67 Specialized Skills for Full-Stack Developers. Transform Claude Code into your expert pair programmer.
AI Writing Detector
conorbronsdon
Scan text for AI writing patterns and get a score, without the text being rewritten.
Next.js 15 + Supabase Architecture Rules
PatrickJS
27 Cursor rules for Next.js 15 with Supabase: verified server auth, async params, row level security and Stripe key safety.
Reverse Engineer Anything (REA)
morluto
Reverse engineer native, Electron, firmware and browser targets with REA, and build agent environments of web apps.
Get the free Developer’s Field Guide
A 27-page field guide to the AI coding workflow with Claude. Claude Code, MCP servers, the prompt patterns that work, and what to delegate. Free.
Enter your work email. We send it straight over, plus a few short notes worth knowing. Unsubscribe any time.