Security Review
Helps with security, code review as part of implementing security and authentication workflows.
Install on your platform
We auto-selected Claude Code based on this skill’s supported platforms.
Run in terminal (recommended)
claude mcp add affaan-m-security-review npx -- -y @trustedskills/affaan-m-security-review
Or manually add to ~/.claude/settings.json
{
"mcpServers": {
"affaan-m-security-review": {
"command": "npx",
"args": [
"-y",
"@trustedskills/affaan-m-security-review"
]
}
}
}Requires Claude Code (claude CLI). Run claude --version to verify your install.
About This Skill
What it does
The affaan-m-security-review skill enables AI agents to conduct comprehensive security assessments of codebases, identifying vulnerabilities, misconfigurations, and potential threats. It leverages best practices in secure coding and industry standards to provide actionable insights for improving the security posture of applications.
When to use it
- Before deploying a new application to production to identify and fix security flaws.
- During code reviews or audits to ensure compliance with security policies.
- After integrating third-party libraries or dependencies into a project.
- When preparing for penetration testing or vulnerability scanning activities.
Key capabilities
- Code vulnerability detection (e.g., SQL injection, XSS).
- Security misconfiguration identification.
- Compliance checks against industry standards like OWASP.
- Dependency analysis for known security issues.
Example prompts
- "Analyze this codebase for potential security vulnerabilities."
- "Check if the application complies with OWASP Top 10 guidelines."
- "Review the dependencies in this project for known security flaws."
Tips & gotchas
- Ensure that the AI agent has access to up-to-date vulnerability databases for accurate results.
- While the skill identifies issues, it may not provide full remediation guidance—manual review is often needed.
Tags
TrustedSkills Verification
Unlike other registries that point to live repositories, TrustedSkills pins every skill to a verified commit hash. This protects you from malicious updates — what you install today is exactly what was reviewed and verified.
Security Audits
| Gen Agent Trust Hub | Pass |
| Socket | Pass |
| Snyk | Pass |
🌐 Community
Passed automated security scans.