The lens a reviewer applies to a diff to find security findings — trust boundaries, the ten review lenses, what counts as a finding and what does not. Use when reviewing a PR that touches authentication, authorization, session handling, secrets, input validation, or external requests.
Install
npx skills add emgiezet/aisdlc --skill security-reviewnpx skills add emgiezet/aisdlc --skill security-review -a claude-code -gnpx skills add emgiezet/aisdlc --skill security-review -a codex -ggemini skills install https://github.com/emgiezet/aisdlc.git --path plugins/sdlc/skills/security-reviewgh skill install emgiezet/aisdlc security-reviewgit clone --depth 1 https://github.com/emgiezet/aisdlc /tmp/emgiezet__aisdlc
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/emgiezet__aisdlc/plugins/sdlc/skills/security-review ~/.claude/skills/security-review # Claude Code
cp -R /tmp/emgiezet__aisdlc/plugins/sdlc/skills/security-review ~/.agents/skills/security-review # Codex, Cursor, Gemini CLI, Copilot, OpenCode