security-review
SkillSecuritysecurity-review is a skill that gives your AI the ability to scan code for security vulnerabilities. It identifies OWASP risks, injection vectors, authentication issues, and data exposure, then classifies each finding by severity so you know what to fix first.
Available today. Use it from your connected AI after setup.
No other account needed.
After adding it, ask your AI to review your code for security flaws. Work through the findings starting with the highest severity.
Then ask your AI: use the security-review skill
What your AI can do with it
- Find injection risks in your code
- Spot authentication issues
- Identify places where data may be exposed
- Check code against OWASP risk categories
- Rank findings by severity so the most serious issues stand out
What this skill tells your AI
The instructions your AI receives, as published by a5c-ai/babysitter in library/methodologies/rpikit/skills/security-review/SKILL.md and read by ahel’s review.
- Before any code merge involving user-facing changes
- As part of the /review-security command
- Mandatory for high-stakes implementations
Process
- Identify modified files with security relevance
- Scan for common vulnerability patterns
- Assess authentication and authorization changes
- Check for data exposure risks
- Evaluate dependency security
- Classify severity and provide recommendations
Severity Levels
- Critical: Immediate exploitation risk
- High: Significant vulnerability requiring fix before merge
- Medium: Vulnerability that should be addressed soon
- Low: Minor security improvement opportunity
Key Rules
- Security review failure halts implementation
- All findings must include file paths and line numbers
- Provide actionable remediation steps
- Reference OWASP categories where applicable
Tool Use
Invoke via babysitter process: methodologies/rpikit/rpikit-review
Signals
- GitHub stars
- 2k
- Forks
- 106
- Last commit
- Sep 2026
Advanced
- Catalog kind
- skill
- Gateway key
security-review- Source
- github.com/a5c-ai/babysitter