claude-code-security-review: Auto‑detect vulnerabilities in PRs
From the repo · “An AI-powered security review GitHub Action using Claude to analyze code changes for security vulnerabilities.”
Analyzes code changes for security vulnerabilities using AI.
"A founder builds a new e-commerce project on GitHub. They set up this security review automation, and every time they push code changes, it automatically scans for vulnerabilities, ensuring their project stays secure. This frees up time to focus on building and launching their project."
- •When merging new code into the main branch to ensure no security vulnerabilities are introduced
- •During regular code audits to identify and remediate existing security issues
- •When onboarding new developers to ensure they understand the security requirements and best practices for the project
To trigger a security review for a specific pull request, add the following step to your workflow file: `uses: Anthropics/claude-code-security-review@v1` and configure the `claude_api_key` and `paths` inputs accordingly
Skip the builder — one click puts this in Claude, Cursor, Antigravity and more.
Expect 20–40 minutes in a terminal — or let your AI agent drive it.
mkdir -p ~/.claude/skills/claude-code-security-review && curl -fsSL https://workflowstacks.com/api/skills/claude-code-security-review/claude-skill -o ~/.claude/skills/claude-code-security-review/SKILL.mdOpens the app with this repo with the prompt ready to go — no copy-paste needed.
Claude-code-security-review: Auto‑detect vulnerabilities in PRs is a medium Python project (~7.5k lines across 27 code files). Expect some technical setup — comfortable with a terminal, or ask a developer. Last commit 7 months ago, MIT license, has a test suite.
- 1README.mdStart here — what it does and how to install it
- 2action.ymlWhere the program starts running
- 3examples/custom-false-positive-filtering.txtA worked example — copy this to get going
Skip the builder — one click puts this in Claude, Cursor, Antigravity and more.
Expect 20–40 minutes in a terminal — or let your AI agent drive it.
mkdir -p ~/.claude/skills/claude-code-security-review && curl -fsSL https://workflowstacks.com/api/skills/claude-code-security-review/claude-skill -o ~/.claude/skills/claude-code-security-review/SKILL.mdOpens the app with this repo with the prompt ready to go — no copy-paste needed.
Are you the creator of this tool? and earn 85% of every sale.
Show it off in your README:
[](https://workflowstacks.com/skills/claude-code-security-review?utm_source=github&utm_medium=badge)The five fastest-growing open-source AI skills, ranked by GitHub star growth. One email a week, unsubscribe anytime.
Do this with a working workflow
Pages we wrote and tested that put a skill like this to work — importable n8n templates, outcome guides and Claude Desktop configs.
GitHub MCP config
Search repos, read code, open issues and PRs from Claude.
Outcome guideTurn meeting notes into a summary email automatically
Paste the transcript into a private form and the workflow writes and emails a concise recap — decisions, owners, open questions — that people will actually read.
Outcome guideTriage your inbox automatically
The workflow watches your inbox and classifies each new email by priority with a one-line reason and a draft reply, logging everything to a ranked sheet. You open your day to a triaged list, not a pile.
Review Watchdog
Catch every bad review the day it lands — with a reply ready.
Includes the tested workflow and a written setup playbook. Needs: Google Places API key (free tier).
Related skills
More ai-agent tools founders pair with this one.