Security Review

by kklimuk

Security Review is a Quality skill for Claude Code, published by kklimuk in docx-cli.

196 stars8 forkson kklimuk/docx-cliAdded 2026/09/05Repository updated 2026/09/04

View source on GitHub Download repo ZIP

agent-skillsai-agentsanthropic-skillsclaude-codeclaude-skillclicodexdocxooxmlword

Install in seconds

Install Security Review

Copy Security Review into your Claude Code skills folder. Run the command in your terminal, or review the source on GitHub before installing.

terminal

npx degit https://github.com/kklimuk/docx-cli/tree/main/.claude/skills/security-review ~/.claude/skills/security-review

Requires Node.js. Downloads this skill only — not the rest of the repository — into your Claude Code skills folder.

Without Node.js

git clone https://github.com/kklimuk/docx-cli.git

Clones the whole repository, then copy the skill’s own directory into your skills folder yourself.

In this catalog

Source file: .claude/skills/security-review/SKILL.md in kklimuk/docx-cli
Installs to: ~/.claude/skills/security-review
Collection: One of 4 skills cataloged from this repository
Category: Quality — 1662 skills

What Security Review does

Security Review audits changed code for vulnerabilities such as injection, auth bugs, data exposure, and unsafe deserialization. Use it when you need a security assessment or OWASP-focused review.

Security Review is cataloged under Quality on DirSkills. Security Review comes from a repository tagged agent-skills, ai-agents, anthropic-skills, claude-code and claude-skill.

Documentation

README

Excerpt

Security Review

Audit changed files for security vulnerabilities, focusing on the OWASP Top 10 and issues specific to the project's stack.

When running locally as a forked subagent, the main session does not see any files you read or any reasoning you do — only the final report you return. When running in CI (e.g. via claude-code-action), the workflow takes the report and turns it into GitHub PR review comments. Either way, take your time, read every changed file completely, and produce a thorough, actionable report. The consumer of this report uses it as a worklist, so it must be complete and self-contained.

Scope

Determine the diff to review:

This is the opening of the README. Read the full README on GitHub.

Frequently asked about Security Review

What else does kklimuk publish alongside Security Review?
Security Review is one of 4 skills that DirSkills catalogs from kklimuk/docx-cli, the repository it ships in. Its siblings there include Commit, Docx CLI and Weak Agent Test. Each one is a separate skill with its own page in this directory, installs the same way Security Review does, and is maintained by kklimuk in that same repository. The rest of the collection is listed on the kklimuk/docx-cli page.
How does Security Review compare to other Quality skills?
Security Review ranks #1546 by stars among the 1662 Quality skills in this catalog. The most-starred ones next to it are Benchmark, Benchmark Optimization Loop and API Design Patterns. DirSkills ranks by the star count of the repository each skill ships in, so that order reflects how popular those repositories are rather than any review of Security Review against them. Open each page to compare what they document and how they install.