AI Skill MartBrowse skillsPromptsProgramsLearnWhat is a Skill?
 
← Back to list

PR Security Review

Reviews only a PR's diff against its base branch and reports just the high-confidence, exploitable security issues.

Security & ReviewIntermediate★ 570⑂ 154AI score 8/10Last updated: Oct 29, 2026

What it does

  • Resolves the PR's base branch (gh pr view → branch upstream → origin/HEAD) and collects status, changed files, commits and the git diff --merge-base output.
  • Hunts five categories: injection (SQL/command/template/NoSQL/path traversal), auth & authorization bypass, crypto and secrets handling, deserialization/eval/XSS, and data exposure.
  • Runs one sub-task to find candidates, then parallel sub-tasks per finding to filter false positives, dropping anything scored below confidence 8.
  • Explicitly excludes noise: DoS, rate limiting, outdated dependencies, docs files, test-only files, theoretical race conditions, client-side auth checks, and more.
  • Outputs a markdown-only report with file, line, severity, category, exploit scenario and fix recommendation.

Who it's for

  • Backend/fullstack devs who want a security gate before merging.
  • Small teams without a dedicated security reviewer.
  • Tech leads burned by noisy SAST tools and false positives.
  • Teams running the super-qa Tester lane on every PR.

Examples

  1. On a branch touching the login API, say "pr security review" → get a report on a possible JWT verification bypass with a concrete fix.
  2. On a file-upload PR, run /pr-security-review → path traversal flagged with line numbers and an exploit scenario.
  3. On a PR that shells out to a system command, command-injection candidates are raised, then the parallel filter stage drops the ones with no real attack path.

· · · Install guide · · ·

Try it now, no install

Paste this into Claude to use the skill without installing anything.

Read the instructions in this file and follow them to help me:
https://raw.githubusercontent.com/EricTechPro/super-board/HEAD/skills/pr-security-review/SKILL.md

What I want: (describe your task here)

If Claude can't open the link, open it yourself and paste the contents instead.

↓ If it works for you, download the ZIP below and install it. Then it runs on its own — no pasting each time.

Install in the Claude app (no terminal)
  1. Download the ZIP with the button below.
  2. In Claude, open Settings → Capabilities and turn on 'Code execution and file creation'. (one time)
  3. Go to Customize → Skills → + → 'Upload a skill' and upload the ZIP.
↓ Download ZIP
Install in Claude Code

Let Claude do it — paste this into Claude Code

Install the skill I found on AI Skill Mart.
Copy the skills/pr-security-review folder from the GitHub repo EricTechPro/super-board into my ~/.claude/skills/pr-security-review/.
When it's done, tell me in one line what this skill can do.

Install with a command instead

git clone https://github.com/EricTechPro/super-board.git /tmp/super-board && mkdir -p ~/.claude/skills && cp -r /tmp/super-board/skills/pr-security-review ~/.claude/skills/

⚠ This is a third-party skill. Check the source repository before installing.

  1. Open your terminal.
  2. Clone the repo: git clone https://github.com/EricTechPro/super-board.git /tmp/super-board
  3. Create the skills directory: mkdir -p ~/.claude/skills
  4. Copy the skill: cp -r /tmp/super-board/skills/pr-security-review ~/.claude/skills/
  5. Make sure git and the GitHub CLI (gh) are installed, then run gh auth login so the skill can read PR metadata.
  6. Restart Claude Code, check out the branch you want reviewed, and type "pr security review".
View source on GitHub ↗License: MIT