security-review
Security vulnerability assessment identifying OWASP risks, injection vectors, authentication issues, and data exposure with severity classification.
npx skills add a5c-ai/babysitter --skill security-review --agent claude-code
Same command for any agent — swap --agent for codex, cursor, copilot.
Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.
- Before any code merge involving user-facing changes - As part of the /review-security command - Mandatory for high-stakes implementations ## Process 1. Identify modified files with security relevance 2. Scan for common vulnerability patterns 3. Assess authentication and authorization changes 4. Check for data exposure risks 5. Evaluate dependency security 6. Classify severity and provide recommendations ## Severity Levels - **Critical**: Immediate exploitation risk - **High**: Significant vulnerability requiring fix before merge - **Medium**: Vulnerability that should be addressed soon - **Low**: Minor security improvement opportunity ## Key Rules - Security review failure halts implementation - All findings must include file paths and line numbers - Provide actionable remediation steps - Reference OWASP categories where applicable ## Tool Use Invoke via babysitter process: `methodologies/rpikit/rpikit-review`
- Process
- Severity Levels
- Key Rules
- Tool Use
What does the security-review skill do?
Security vulnerability assessment identifying OWASP risks, injection vectors, authentication issues, and data exposure with severity classification.
How do I install it?
Run `npx skills add a5c-ai/babysitter --skill security-review --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.
Where does this skill come from?
From a5c-ai/babysitter, a repository with 1,642 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.
Is a popular skill a good skill?
Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.