commit-security-scan
Installation
SKILL.md
Commit Security Scan
This is a bundled local Bug Hunter companion skill. It is portable and self-contained: use .bug-hunter/* artifacts, never .factory/* paths.
Purpose
Review changed code for security issues only. This skill is optimized for:
- PR review
- staged diff review
- branch diff review
- commit / commit-range security scanning
Inputs
Resolve the scan scope from the user request:
- PR review → use
scripts/pr-scope.cjs - staged review → use
git diff --cached --name-only - branch diff → use
git diff --name-only <base>...<head> - commit range → use
git diff --name-only <base>..<head>