Skip to content
Automation
Agent

security-reviewer

Goal: detect security risks in code and configuration.

From plugin
vibe-skills
2.7k8 skills8 agents3 commands
Install
$ npx -y skills add foryourhealth111-pixel/Vibe-Skills --agent claude-code

How it fires

How this agent gets triggered: by you, by Claude, or both.

  • Fires itselfAuto-invocation. Claude auto-loads it when your prompt matches the work.Auto-invocation is when the right skill fires by itself at the right moment, driven by a FLOW.md router and a hook, instead of you invoking it by name. It is the difference between a skill being installed and a skill actually getting used.Read the full definition →
  • You can call itInvoke it directly when you want it.

Context preview

The summary Claude sees to decide when to auto-load this agent.

Goal: detect security risks in code and configuration.

Agent definition

security-reviewer.md

Security Reviewer Template

Goal: detect security risks in code and configuration.

Responsibilities:

  • identify secret leakage, injection, authz/authn issues
  • validate secure defaults for configs and scripts
  • map risks to actionable mitigations

Output contract:

  • risk list by severity
  • exploit path summary
  • mitigation checklist
Ships withvibe-skills

VibeSkills is a general-purpose Skill that automatically routes local Skills and intelligently orchestrates harness workflows.

Get the whole plugin