security-review
Security-focused, read-only review of a diff/PR/codebase — find vulnerabilities and report with severity; never modify files.
Skill by kellykampen
Install
Works with Claude Code, Claude apps, Codex, Cursor, Gemini CLI, GitHub Copilot, VS Code, OpenCode, Goose, Windsurf. Read the repository before you give any tool access to your data.
npx agentmarket install skill/kellykampen-security-review
Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.
Get the weekly diff
The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.
About
Use cases: documents, security
Reviews
Write a reviewNo reviews yet. Installed it? Reviews come from verified installers only. How reviews work
Permissions
What this skill can do and what it asks for, from its SKILL.md. Checked Oct 25, 2026.
- Tools
- No tools found
- Secrets
- None asked for
- Install scripts
- None found
Network hosts it talks to 1
codeload.github.com· found in install command
Files it touches
~/.claude/skills/security-review
What's inside
- Skill name
security-review- Description
- Security-focused, read-only review of a diff/PR/codebase — find vulnerabilities and report with severity; never modify files.
- License
- MIT
- Instructions
- 13 lines in SKILL.md · view on GitHub
Files (1)
- SKILL.md
SKILL.md (first lines)
You are a SECURITY REVIEWER with READ-ONLY tools. Examine the specified diff/PR/code for security issues and report them — do not modify anything. Look for: authn/authz gaps (missing checks, IDOR, privilege escalation); injection (SQL, command, XSS, template, path traversal); secrets/credentials in code or logs; SSRF; unsafe deserialization; weak/mis-used crypto; missing input validation & output encoding; insecure defaults; sensitive-data exposure; dependency/supply-chain risks; auth-token/session handling; CORS/CSRF; race conditions in security-relevant paths. Report format: VERDICT (pass / issues found); each finding with SEVERITY (critical/high/med/low), file:line, the concrete exploit/impact, and a fix direction. Prioritize real, exploitable issues over theoretical nits. If you're unsure something is exploitable, say so rather than crying wolf.
From kellykampen/pi-fleet, MIT.
More from kellykampen/pi-fleet
- 0.547score
project-lead
kellykampen
Project lead — coordination-only router/multiplier for one project/stream; cast every implementation/review/AC/docs seat immediately with the right model (via…
SkillBFreshness: B★ 1Claude Code +9 - 0.547score
spike-breakdown
kellykampen
Turn a Linear SPIKE into a well-formed Linear PROJECT + issues.
SkillBFreshness: B★ 1Claude Code +9 - 0.544score
fleet-mail
kellykampen
Use the fleet-mail CLI for async status between fleet seats (workers → project-lead only).
SkillBFreshness: B★ 1Claude Code +9 - 0.544score
linear-management
kellykampen
Manage Linear issues/projects via the linear-cli — read tickets, create/update issues, set status, comment, wire relations.
SkillBFreshness: B★ 1Claude Code +9 - 0.544score
conductor
kellykampen
Cross-project conductor — assign work to project leads, watch portfolio health, escalate to the CEO.
SkillBFreshness: B★ 1Claude Code +9 - 0.544score
personal-assistant
kellykampen
The operator's personal assistant — drafts/sends across his personal comms + tools (X, iMessage, WhatsApp, Gmail/Google Workspace, Obsidian, Linear, macOS…
SkillBFreshness: B★ 1Claude Code +9 - 0.544score
implementation
kellykampen
Implement one ticket end-to-end in a git worktree — code + tests — then report commit sha, PR URL, and verification results to the project lead only via…
SkillBFreshness: B★ 1Claude Code +9 - 0.541score
fleet-state
kellykampen
Secure pi-fleet runtime state, handoff, migration, and retention rules
SkillBFreshness: B★ 1Claude Code +9 - 0.539score
code-review
kellykampen
Independent read-only review of a diff/PR against acceptance criteria, correctness, security, and project conventions.
SkillBFreshness: B★ 1Claude Code +9 - 0.494score
docs
kellykampen
Final Docs pass on a PR - runs after review + AC-verify + CI are green and before merge/Done.
SkillCFreshness: C★ 1Claude Code +9 - 0.494score
visual-qa
kellykampen
Capture a running-app screenshot and compare it to the design comp (the oracle); report visual fidelity.
SkillCFreshness: C★ 1Claude Code +9 - 0.489score
design
kellykampen
Design/architecture/API + planning seat — produce clean design docs, architecture decisions, and API shapes that fit the existing codebase; hand…
SkillCFreshness: C★ 1Claude Code +9
Signals
- Stars
- 1
- Forks
- 0
- Open issues
- 0
- Last commit (this folder)
- Jul 10, 2026 (3 months ago)
From GitHub (fetched Oct 24, 2026).
Details
- License
- MIT
- Repository
- github.com/kellykampen/pi-fleet
- First seen
- Oct 24, 2026
- Last checked
- Oct 24, 2026
- Source
- GitHubgithub-graphql
More from kellykampen
- 0.547score
spike-breakdown
kellykampen
Turn a Linear SPIKE into a well-formed Linear PROJECT + issues.
SkillBFreshness: B★ 1Claude Code +9 - 0.547score
project-lead
kellykampen
Project lead — coordination-only router/multiplier for one project/stream; cast every implementation/review/AC/docs seat immediately with the right model (via…
SkillBFreshness: B★ 1Claude Code +9 - 0.544score
personal-assistant
kellykampen
The operator's personal assistant — drafts/sends across his personal comms + tools (X, iMessage, WhatsApp, Gmail/Google Workspace, Obsidian, Linear, macOS…
SkillBFreshness: B★ 1Claude Code +9 - 0.544score
fleet-mail
kellykampen
Use the fleet-mail CLI for async status between fleet seats (workers → project-lead only).
SkillBFreshness: B★ 1Claude Code +9 - 0.544score
linear-management
kellykampen
Manage Linear issues/projects via the linear-cli — read tickets, create/update issues, set status, comment, wire relations.
SkillBFreshness: B★ 1Claude Code +9 - 0.544score
conductor
kellykampen
Cross-project conductor — assign work to project leads, watch portfolio health, escalate to the CEO.
SkillBFreshness: B★ 1Claude Code +9
Cite this page
security-review skill. Agent Mart. https://agentmart.dev/skills/kellykampen-security-review (last updated 2026-10-24)