Performs a white-box security review of Atlassian Forge apps using structured, Forge-specific security rules and evidence-driven reporting. Use when the user asks for a Forge security review, security audit, vuln assessment, pentest-style code review, authz review, tenant isolation analysis, web trigger hardening, or static analysis execution for a Forge app.
Install
npx skills add atlassian/forge-skills --skill forge-security-reviewnpx skills add atlassian/forge-skills --skill forge-security-review -a claude-code -gnpx skills add atlassian/forge-skills --skill forge-security-review -a codex -ggemini skills install https://github.com/atlassian/forge-skills.git --path skills/forge-security-reviewgh skill install atlassian/forge-skills forge-security-reviewgit clone --depth 1 https://github.com/atlassian/forge-skills /tmp/atlassian__forge-skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/atlassian__forge-skills/skills/forge-security-review ~/.claude/skills/forge-security-review # Claude Code
cp -R /tmp/atlassian__forge-skills/skills/forge-security-review ~/.agents/skills/forge-security-review # Codex, Cursor, Gemini CLI, Copilot, OpenCode