Code Review · agent skill
Security Review
Exploit sketch, severity and fix for each finding.
Scan 100/100Grade A~2,188 tokens on trigger2 filesWhat it does
Exploit sketch, severity and fix for each finding.
Your agent loads it when the change touches auth, user input, outbound requests, secrets or an LLM feature. It carries 5 rules and reads a profile.md with your details before it starts, so the output matches your brand and project.
Install
One command, in your project folder. It detects your agent; add --agent all for every agent.
npx proskills-cli add security-review --order <order id from your receipt>
Or copy the skill folder (the one holding SKILL.md) into the directory your agent reads, then restart it or start a new session.
| Agent | This project | Every project |
|---|---|---|
| Claude Code | .claude/skills/ | ~/.claude/skills/ |
| Cursor | .agents/skills/ (or .cursor/skills/) | ~/.cursor/skills/ |
| Codex | .agents/skills/ | ~/.agents/skills/ |
| Gemini CLI | .agents/skills/ (or .gemini/skills/) | ~/.gemini/skills/ |
More from Code Review
The scan checks spec compliance, token cost, clarity and security patterns. A clean scan is not a guarantee: static scanners can be evaded. Scan any skill yourself.