security-review (built-in)Security review (built in) for Claude
by AnthropicOfficialBuilt-in /security-review for pending changes
What it does
Claude Code is an agentic coding tool that lives in your terminal, understands your codebase, and helps you code faster by executing routine tasks, explaining complex code, and handling git workflows -- all through natural language commands. Use it in your terminal, IDE, or tag @claude on Github.
From the pack's README and its skills' SKILL.md files, as their authors wrote them.
What's inside
- claude-opus-4-5-migration: Migrate prompts and code from Claude Sonnet 4.0, Sonnet 4.5, or Opus 4.1 to Opus 4.5.
- frontend-design: Guidance for distinctive, intentional visual design when building new UI or reshaping an existing one.
- Writing Hookify Rules: This skill should be used when the user asks to "create a hookify rule", "write a hook rule", "configure hookify", "add a hookify rule", or needs guidance on hookify…
- Agent Development: This skill should be used when the user asks to "create an agent", "add an agent", "write a subagent", "agent frontmatter", "when to use description", "agent examples",…
- Command Development: This skill should be used when the user asks to "create a slash command", "add a command", "write a custom command", "define command arguments", "use command…
- Hook Development: This skill should be used when the user asks to "create a hook", "add a PreToolUse/PostToolUse/Stop hook", "validate tool use", "implement prompt-based hooks", "use…
- MCP Integration: This skill should be used when the user asks to "add MCP server", "integrate MCP", "configure MCP in plugin", "use .mcp.json", "set up Model Context Protocol", "connect…
- Plugin Settings: This skill should be used when the user asks about "plugin settings", "store plugin configuration", "user-configurable plugin", ".local.md files", "plugin state files",…
and 2 more in this pack.
Key details
Creator
Anthropic
Collection
Security
Trust tier
Anthropic official
Last updated
2mo ago
Security scan
Grade B · minor notes · checked Oct 16, 2026
Compatible with
Read security-review (built-in)
The full SKILL.md is included with the membership.
Related skills
View more
defending-code-reference-harness
Autonomous vulnerability discovery and remediation: threat-model, vuln-scan, triage, and patch skills with a sandboxed scanning pipeline

Endor Labs
endorctl scan/prioritize/fix supply chain risks

Aikido Security
SAST, secrets, IaC vulns via Aikido MCP

azure-compliance
Run Azure compliance and security audits with azqr plus Key Vault expiration checks.

