cybersecurity-review
Cybersecurity Review
Perform structured security code review across 9 dimensions, adapting depth based on review mode.
Review Modes
Select the appropriate mode based on context:
| Mode | Trigger | Scope | Depth |
|---|---|---|---|
| New Code | Reviewing code just written or a new feature | Changed files only | Deep on all 9 dimensions |
| Existing Repo | Auditing an established codebase | Full repository scan | Prioritize high-severity, sample for depth |
| Open Source Eval | Evaluating a dependency or OSS project | Full project + community signals | Supply chain focus + all 9 dimensions |
| Pull Request | Reviewing a PR for merge readiness | Diff only + touched files | Deep on changed code, contextual on surrounding code |
Review Workflow
Step 1: Determine scope and mode
More from ericmjl/skills
html-presentations
Create single-file HTML slide presentations with vanilla JS/CSS. Themed (terminal.css, catppuccin, nord), keyboard-navigable, with inline SVG diagrams and animations. Use when the user asks for an HTML presentation, slide deck, or single-file slides without a framework.
29agents-md-improver
Proposes updates to AGENTS.md so repo-local coding-agent instructions stay accurate, non-contradictory, and consolidated. Use when the user corrects the agent (e.g. do not do X, always do Y, from now on, remember this), asks to edit or sync AGENTS.md, CLAUDE.md, .claude/CLAUDE.md, or GEMINI.md, wants one canonical instruction file or to deduplicate agent docs, or flags conflicting or outdated repository agent rules.
22scientific-eda
Defensive exploratory data analysis for scientific data (CSV, FASTA, etc.). Context-first, human-guided; one plot at a time, ask why before executing, append-only journal per session, scripts with PEP723 and uv run, WebP plots. Use when opening data files for EDA or when the user wants guided scientific data exploration.
20skill-creator
Guide for authoring Agent Skills with strong YAML `description` triggers, progressive disclosure, and bundled resources. Use when creating or updating a skill, running init_skill.py or package_skill.py, or improving a bland skill description so agents load the skill on the right user tasks.
18ml-experimentation
Conduct machine learning experiments from planning through evaluation and report writing. Use when running ML experiments, testing hypotheses, training models, or writing up results. Covers single-hypothesis scoping, fast iteration loops, targeted logging, JOURNAL.md protocol, data-backed diagnostic plots, and scientific report writing.
16gh-cli
Use GitHub CLI (gh) for common operations like creating PRs, viewing GitHub Actions logs, managing issues, reviewing PRs, and more. Use this when you need to interact with GitHub repositories directly from the command line.
14