code-review-security SKILL.md skillA
code-review-security from aktsmm/agent-skills is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add aktsmm/agent-skills/code-review-security@git:20261018.a6d0f06Pins git:20261018.a6d0f06 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- aktsmm/agent-skills
- Path
code-review-security/SKILL.md- Versions recorded
- 1
- Latest version
- git:20261018.a6d0f06, committed Oct 18, 2026
- Size
- 7,691 bytes
- Repository stars
- 26
- License
- a license file GitHub does not identify
差分、PR、選択範囲、指定ファイルをセキュリティ観点で read-only レビューし、rubber duck / critic review で確認してから高信頼の脆弱性を報告する.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
<!-- syncToGlobal: true --> <!-- author: aktsmm --> <!-- repository: https://github.com/aktsmm/Agent-Customization --> <!-- license: CC BY-NC-SA 4.0 --> <!-- copyright: Copyright (c) 2025 aktsmm --> # code review security 指定された差分、PR、選択範囲、ファイル、または現在の Git 変更をセキュリティ観点でレビューする。 ## When to Use - 使う: `/security-review` 的に、変更差分の exploitability を確認したいとき - 使う: injection、認証認可、secret leak、supply chain、LLM prompt injection を重点的に見たいとき - 使う: 「セキュリティレビュー」「脆弱性見て」「攻撃可能性を見て」と依頼されたとき - 使う: 「レビューして修正」「fix」「直して」など、レビュー後の修正まで明示されたとき - 使わない: 一般的なコード品質、style、設計好み、性能だけを見たいとき。その場合は `/code-review-multi-angle` を使う ## Mode - 既定は `review-only`: コードを編集せず、security finding と修正方針だけを出す - `fix` / `修正して` / `直して` が明示された場合だけ `review-and-fix`: security review、critic review、最小修正、focused validation まで行う - destructive operation、外部反映、履歴改変、push、広範囲 refactor、secret rotation は fix mode でも実行前に確認する ## Scope Detection 優先順でレビュー対象を決める。 1. ユーザーが指定した PR URL、比較ブランチ、ファイル、選択範囲、貼り付け diff 2. staged changes: `git --no-pager diff --staged` 3. unstaged changes: `git --no-pager diff` 4. working tree が clean の場合: `git --no-pager diff main...HEAD` `main` 以外の base branch が自然なリポジトリでは、branch 名や upstream を確認してから使う。 …
Read the whole file at its exact version.
How to install
mdr add aktsmm/agent-skills/code-review-security@sha256:7f548d9c55f8404cThe line at the top of this page pins the label git:20261018.a6d0f06, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_zfsnssdy7r6lppy7)
3 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 1 version of this file, committed on Oct 18, 2026.
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (7691 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
aktsmm/agent-skills · 26 stars · license a license file GitHub does not identify · pushed 2026-11-04 · branch master
API
GET https://markdownregistry.com/api/v1/artifacts/art_zfsnssdy7r6lppy7 GET https://markdownregistry.com/api/v1/resolve?ref=aktsmm/agent-skills/code-review-security GET https://markdownregistry.com/api/v1/blob/7f548d9c55f8404cabbe319b8925b947e2505ea92af6b1e8543a713bed4600a1
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.
More from aktsmm/agent-skills
Every file in aktsmm/agent-skills