security-review

82 / 100 · Low risk

Fine to try. Some of what it can do is expected: a coding skill usually runs build and test commands.

By sageox/ox (GitHub) · coding · 67 stars · scanned at commit 90be74f

ox 6-phase AI security review pipeline. Combines deterministic OSS scanners (OpenGrep, govulncheck, OSV-Scanner, Syft+Grype, gitleaks) with parallel Claude hunter/validator subagents to find CLI input handling bugs, secret/credential redaction bypasses, daemon IPC authz holes, supply-chain risks, and LLM trust-boundary issues. Diff-scoped (vs origin/main by default). Never blocks merge. Use when asked to "security review", "/security-review", "review this for security", "audit this PR", "check …

Works with any agent that supports SKILL.md skills.

What this skill can do

Runs commands on your computer

This is disclosed by the author in the skill's SKILL.md or README. Expected for a coding skill.

Found in 4 places.

.claude/skills/security-review/SKILL.md, line 22bash security/scripts/orchestrate.sh "$@"
.claude/skills/security-review/prompts/hunter-cli-input.md, line 618. **`git` / `glab` invocation with user-controllable URLs.** `git clone <url>` accepts URLs of the form `ext::sh -c 'evil'` in older git versions and `--upload
.claude/skills/security-review/prompts/hunter-cli-input.md, line 95- Don't propose ad-hoc string-sanitizing of shell metacharacters. The fix is "don't go through a shell" (which Go's `exec.Command` already does — it does NOT in

Show 1 more

.claude/skills/security-review/prompts/hunter-injection.md, line 231. **`sh -c` antipattern.** Critical regardless of how "safe" the args look.

Downloads and installs other software

The author does not mention this.

Found in 1 place.

.claude/skills/security-review/prompts/hunter-supply-chain.md, line 45| New `go install` invocations in CI / `Makefile` | If tag not pinned, latest is downloaded | CI supply chain |

Install

Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.

if [ -e ~/.agents/skills/'security-review' ] || [ -L ~/.agents/skills/'security-review' ]; then echo 'A skill folder named security-review already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/sageox/ox' "$d" && git -C "$d" checkout --quiet '90be74fc9c549a6bc37dd5057f733defb3a14503' -- '.claude/skills/security-review' && mkdir -p ~/.agents/skills && cp -R "$d"/'.claude/skills/security-review' ~/.agents/skills/'security-review' && rm -rf "$d"; fi

Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'security-review' ~/.claude/skills/'security-review' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.

Badge for your README

The badge for sageox/ox shows the score of its lowest-scoring skill.

SkillTrust badge for sageox/ox

[![SkillTrust](https://zalavijaysinh.github.io/skilltrust/badges/sageox/ox.svg)](https://zalavijaysinh.github.io/skilltrust/repos/sageox/ox/)

Score history

Date	Version	Score
2026-11-13	`90be74f`	82
2026-11-08	`552789c`	82