sourjya

Review Code Security — Security skill for Claude Code

Security community

Tiered application security audit (T1 pre-commit, T2 feature complete, T3 sprint end) covering OWASP, secrets, authorization, crypto quality, and supply chain.

How to install Review Code Security

Installs to ~/.claude/commands/sourjya-kiro-rails-review-code-security.md

Terminal
mkdir -p ~/.claude/commands && curl -fsSL https://raw.githubusercontent.com/sourjya/kiro-rails/HEAD/.claude/commands/review-code-security.md -o ~/.claude/commands/sourjya-kiro-rails-review-code-security.md

Restart Claude Code, or start a new session, for it to be picked up.

What Review Code Security does

description: "Tiered application security audit (T1 pre-commit, T2 feature complete, T3 sprint end) covering OWASP, secrets, authorization, crypto quality, and supply chain. Produces an SRR report."

You are a senior application security and code quality auditor performing a comprehensive review. Prioritize real exploitability over generic warnings. Prefer smallest safe remediation.

Before scanning, read these context documents if they exist:

  • docs/security/THREAT_MODEL.md - trust b

Alternatives in Security

  • FastAPI Review — Review a FastAPI application for architecture, async correctness, dependency injection, Pydantic schemas, secu 243.5k ★
  • Agent Skills Guard — 一款提供Agent Skills安全扫描和可视化管理的桌面应用 A desktop application that provides security scanning and visual management fo 389 ★
  • Perplexity Super Skills — Complete collection of 12 Perplexity Computer Super-Skills merging Perplexity + Claude Code capabilities acros 346 ★

Full documentation available on GitHub

View Source Repository

Related Skills

Audit End Sprint — Security skill for Claude Code

Audit End Sprint

End-of-sprint code audit — run 9-dimension sweep (security, quality, tests, dead code, TODO/FIXME, perf, docs,

Security community
Cleanup Repo — Security skill for Claude Code

Cleanup Repo

Read-only repo audit for stale/orphaned files, tracked cruft, accidentally-committed secrets, empty files, and

Security community
Shipwright — Security skill for Claude Code

Shipwright

One skill to design, build, test, polish, and ship world-class software. A complete AI coding agent skill cove

Security community
Uk Visa Autopilot Skill — Security skill for Claude Code

Uk Visa Autopilot Skill

Claude Code skill that runs a UK visitor visa application end to end: rules lookup, document audit, form fill,

Security community
AI Agent Audit — Security skill for Claude Code

AI Agent Audit

Read-only audit of a local developer machine for AI-agent-related security risks (Linux + macOS). Ten modules

Security community
Claude Code Security — Security skill for Claude Code

Claude Code Security

Progressive hardening framework covering agent config protection, hooks, runtime security, injection preventio

Security community

Related Agents

Critic Security — Security agent for Claude Code

Critic Security

Review code for OWASP-style security issues (injection, authn/authz, secrets, supply chain, LLM-specific) in p

Security community
Security Executor — Security agent for Claude Code

Security Executor

Security-sensitive implementation and analysis - authentication/authorization, secrets handling, crypto usage,

Security community
Code Security Reviewer — Security agent for Claude Code

Code Security Reviewer

Performs structured code security and quality audits with restricted tool access. Supports tiered review (T1 p

Security community