Skip to content

// OWASP-aware code security audit — finds auth, input, secret, and dependency issues with remediation.

Security ReviewVerified Creator

git log --oneline --stat
HEAD
Stars
6.8k
Forks
407
Updated
May 27, 2026
repo --stat

  • stars

    6.8k

  • forks

    407

  • last update

    May 27, 2026

  • license

    MITv2.4.0

quickstart.sh
3 steps
  1. Install

    // Drops SKILL.md into ~/.claude/skills/

    $ claude skills add security-review-skill
  2. Invoke

    // Run from any project directory

    $ claude --skill security-review-skill "wire up a GitHub Actions deploy"
  3. Iterate

    // Re-run with edits — Claude keeps the skill loaded

    $ claude --skill security-review-skill "now refactor it"
security-review-skill/
references
SKILL.md
readonly
name:
Security Review
slug:
security-review-skill
version:
v2.4.0
license:
MIT
author:
@anthropic-labs
repository:
github.com/anthropics/skills/tree/main/security-review
categories:
DevOps / CI/CDBackendQA / Testing
tags:
#security#owasp#code-review#audit#saas-security
description:

OWASP-aware code security audit — finds auth, input, secret, and dependency issues with remediation.

features.md
3 capabilities

// What you can do with it

  • Automates the tedious parts of the workflow.
  • Gives Claude the right context, tools, and guardrails.
  • Produces consistent, reviewable output every time.

README.md

security-review-skill/README.md
5 sections
Loading README…
@anthropic-labs/index.json
more by author

authored by

@anthropic-labs
view profile

$ cat reviews/

Reviews

// No reviews yet. Be the first.
Loading review form…

$ ls related/

explore all →