anthropics

Claude Code Security Review — Security skill for Claude Code

Security community intermediate

An AI-powered security review GitHub Action using Claude to analyze code changes for security vulnerabilities.

How to install Claude Code Security Review

This entry records only its repository, not the path inside it, so there is no exact command to give. Open anthropics/claude-code-security-review and copy the folder into ~/.claude/skills/, or the file into ~/.claude/agents/.

What Claude Code Security Review does

An AI-powered security review GitHub Action using Claude to analyze code changes for security vulnerabilities. This action provides intelligent, context-aware security analysis for pull requests using Anthropic's Claude Code tool for deep semantic security analysis. See our blog post [here](https://

Alternatives in Security

Security Best Practices — Review code for language-specific security vulnerabilities 14.6k ★
Deepsec — Deepsec is a security harness for finding vulnerabilities in your codebase powered by coding agents 7.8k ★
Mcp-scan (Invariant Labs) — MCP security scanner with proxy mode for real-time scanning without infrastructure changes 1.9k ★

README

Claude Code Security Reviewer

Features

AI-Powered Analysis: Uses Claude's advanced reasoning to detect security vulnerabilities with deep semantic understanding
Diff-Aware Scanning: For PRs, only analyzes changed files
PR Comments: Automatically comments on PRs with security findings
Contextual Understanding: Goes beyond pattern matching to understand code semantics
Language Agnostic: Works with any programming language
False Positive Filtering: Advanced filtering to reduce noise and focus on real vulnerabilities

Quick Start

Add this to your repository's `.github/workflows/security.yml`:

name: Security Review

permissions:
  pull-requests: write  # Needed for leaving PR comments
  contents: read

on:
  pull_request:

jobs:
  security:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
        with:
          ref: ${{ github.event.pull_request.head.sha || github.sha }}
          fetch-depth: 2
      
      - uses: anthropics/claude-code-security-review@main
        with:
          comment-pr: true
          claude-api-key: ${{ secrets.CLAUDE_API_KEY }}