# Github Code Review Security Agent

> Sub-skill of github-code-review: Security Agent (+3).

- Skill: `vamseeachanta/github-code-review-security-agent` (Agent Skill)
- Install (CLI): `npx skillmds@latest add vamseeachanta/github-code-review-security-agent`
- Raw SKILL.md: https://api.skillmd.com/api/skills/vamseeachanta/github-code-review-security-agent/raw
- Safety review: PASS (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: AI & ML
- Author: vamseeachanta (https://skillmd.com/u/vamseeachanta)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/vamseeachanta/github-code-review-security-agent

---


# Security Agent (+3)

## Security Agent


| Check | Description |
|-------|-------------|
| SQL injection | Detect SQL injection vulnerabilities |
| XSS | Cross-site scripting attack vectors |
| Authentication | Auth bypasses and flaws |
| Cryptographic | Weak crypto implementations |
| Secrets | Exposed credentials or API keys |
| CORS | Misconfiguration issues |

## Performance Agent


| Metric | Description |
|--------|-------------|
| Algorithm complexity | Big-O analysis |
| Query efficiency | N+1 queries, slow queries |
| Memory patterns | Allocation and leaks |
| Cache utilization | Caching opportunities |
| Bundle size | Impact on bundle size |

## Style Agent


| Check | Description |
|-------|-------------|
| Code formatting | Consistent formatting |
| Naming conventions | Variable/function naming |
| Documentation | Comment quality |
| Test coverage | Missing tests |
| Error handling | Proper error patterns |

## Architecture Agent


| Pattern | Description |
|---------|-------------|
| SOLID principles | Single responsibility, etc. |
| DRY violations | Code duplication |
| Coupling metrics | Component dependencies |
| Layer violations | Architecture boundaries |
| Circular dependencies | Dependency cycles |