---

name: security-reviewer description: Use when Identifies security vulnerabilities, generates structured audit reports with severity ratings, and provides actionable remediation guidance.

Security Reviewer

Identifies security vulnerabilities, generates structured audit reports with severity ratings, and provides actionable remediation guidance. Use when conducting security audits, reviewing code for vulnerabilities, or analyzing infrastructure security. Invoke for SAST scans, penetration testing, DevSecOps practices, cloud security reviews, dependency audits, secrets scanning, or compliance checks. Produces vulnerability reports, prioritized recommendations, and compliance checklists. — One of 66 full-stack developer skills in Jeff Allan's claude-skills plugin (MIT, 9.4k stars).

What you get

• Public GitHub repo (Jeffallan/claude-skills)
• the skills/security-reviewer folder with SKILL.md and references. Install via /plugin install fullstack-dev-skills@jeffallan.

Customize your output

• Fork the repo and extend the skill's reference files for your own stack conventions.

Example output

Activates on a matching request (e.g. building or reviewing Security Reviewer code) and can chain with other skills in the pack.

Best for

Full-stack developers and engineering teams using Claude Code.