Security Review

Use when performing security audits, vulnerability assessments, penetration testing, or when asked to find security issues. Use when encountering code that handles user input, executes commands, reads files, or makes network requests.

7 stars 1 forksSecurity

Install

skills CLI (Claude Code, Cursor, Codex and more)

npx skills add Dilaz/security-review-skill --skill security-review

Manual install

git clone --depth 1 https://github.com/Dilaz/security-review-skill.git /tmp/security-review-skill
mkdir -p ~/.claude/skills
cp -r /tmp/security-review-skill/. ~/.claude/skills/security-review

Personal skills live in ~/.claude/skills. Use .claude/skills in a project folder to share a skill with your team.

From the SKILL.md

# Security Review & Exploit Development

## Overview

Systematic security review using automated tools AND manual analysis, with working proof-of-concept exploits for every finding. **No vulnerability is confirmed until exploited.**

## The Iron Law

```
NO FINDING WITHOUT A WORKING EXPLOIT
```

Suspecting a vulnerability is worthless. You must prove exploitation.

## Workflow

Read the full skill on GitHub

Details

Skill name: security-review
Repository: Dilaz/security-review-skill
License: MIT
Repo updated: 3 February 2026

FAQ

What does the Security Review skill do?

How do I install the Security Review skill?

skills CLI (Claude Code, Cursor, Codex and more): npx skills add Dilaz/security-review-skill --skill security-review. Skills go in ~/.claude/skills (personal) or .claude/skills (project), and Claude loads them automatically when a task matches the description.

Is Security Review popular?

It lives in Dilaz/security-review-skill, which has 7 GitHub stars and 1 forks.

Related skills

Solidity Security Audit

mariano-aguero/solidity-security-audit-skill

Comprehensive Solidity smart contract security auditing and vulnerability analysis skill. Based on methodologies from Trail of Bits, OpenZeppelin, Consensys Diligence, Sherlock, CertiK, Cyfrin, Spearbit, Halborn, and other leading Web3 security firms. This skill should be used whenever the user asks to "audit a smart contract", "review Solidity code for security", "find vulnerabilities", "check for reentrancy", "analyze gas optimization", "review access control", "check proxy patterns", "analyze DeFi protocol security", "review ERC20/ERC721 implementation", "check oracle manipulation risks", "

Security

Oma Lwm2m Expert

svdwalt007/Best-LwM2M-Agentic-Skills

OMA LwM2M expert: specs v1.0–v1.2.2 plus v2.0 roadmap, object/resource data model, transports, security, ecosystem. Trigger on: LwM2M, Lightweight M2M, OMA SpecWorks, OMNA registry, OMA-TS-LightweightM2M, CoAP (RFC 7252/7641/7959/8323), DTLS, DTLS CID (RFC 9146), DTLS 1.3, RRC (RFC 9853), OSCORE (RFC 8613), PSK, RPK, X.509, EST, SNI, NoSec, TLV, SenML JSON/CBOR, LwM2M CBOR, bootstrap, Bootstrap-Pack, registration, endpoint name, Profile ID, Queue Mode, bindings (UDP/TCP/SMS/Non-IP/LoRaWAN/MQTT/HTTP/ WebSockets), Read/Write/Execute/Discover, composite operations, Send, observe/notify, notificat

Security

16 Eyes

kigiela/16-eyes

Security audits with four subcommands — `/16-eyes init` (configure: detect quality gates, exclude patterns, output location, and design the repo's tailored investigation lenses — auto-runs non-interactively if skipped), `/16-eyes audit` (run every persisted lens across the WHOLE repo, verify every finding skeptically, adversarially re-check high-impact ones, produce a classified safe/risky report), `/16-eyes audit-diff` (the identical engine, scoped to a diff/PR instead of the whole repo — for reviewing a change before merge), `/16-eyes fix` (apply the findings — safe ones directly, risky ones

SecurityIn 1 list

Spinal Pro

Zeeh-Lin/spinal-pro

End-to-end SpinalHDL skill for generating, reviewing, explaining, and validating RTL (Scala HDL). Covers DSL semantics (`:=`, `<>`, `Reg`, `Stream`, `Flow`, `Bundle`, `Vec`, `ClockDomain`, `StateMachine`, `Mem`, `BusSlaveFactory`), pipeline and plugin composition (`spinal.lib.misc.pipeline`, `spinal.lib.misc.plugin`), simulation with `SimConfig`/`doSim`, and architecture patterns drawn from official SpinalHDL docs and VexRiscv. Load for SpinalHDL DSL questions, module implementation, interface design, SoC integration, bug hunting, error-message decoding, and simulation or build validation.

Security

Skill Evaluator

huajielong/skill-evaluator

Evaluate any skill before installing. Run security gate, score trigger precision, execution quality, and cost efficiency. Get a yes/no recommendation. Use when users find a new skill and ask "这个技能值不值得装？" v3.1: 脚本计数精度+信息密度阈值+脚本完整性检查

Security

Skill Security Reviewer

oguzhantopgul/skill-security-reviewer

Security review and threat analysis for agent skills. Use when reviewing, auditing, or validating skills for security issues including prompt injection, code execution risks, data exfiltration, supply chain vulnerabilities, and policy violations. Triggers on requests to "review a skill", "audit skill security", "check skill for vulnerabilities", "validate skill safety", or any security assessment of SKILL.md files and their associated scripts/assets.

Security

Browse the most popular Claude skills, all security skills, or write your own with the skills generator.