Reviews the diff a work item has produced for authentication, session, token, secret and permission-check defects, and writes severity-ranked findings to the result file. Kraft runs it as an extra review task beside the general code review in a verification node. No shipped chain runs it: an operator adds it to the library and a chain, for changes that touch those areas.
安装
npx skills add itsOmidKarami/kraft --skill security-reviewnpx skills add itsOmidKarami/kraft --skill security-review -a claude-code -gnpx skills add itsOmidKarami/kraft --skill security-review -a codex -ggemini skills install https://github.com/itsOmidKarami/kraft.git --path src/kraft/skills/security-reviewgh skill install itsOmidKarami/kraft security-reviewgit clone --depth 1 https://github.com/itsOmidKarami/kraft /tmp/itsOmidKarami__kraft
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/itsOmidKarami__kraft/src/kraft/skills/security-review ~/.claude/skills/security-review # Claude Code
cp -R /tmp/itsOmidKarami__kraft/src/kraft/skills/security-review ~/.agents/skills/security-review # Codex, Cursor, Gemini CLI, Copilot, OpenCode