安全检查清单

Identify and remediate security vulnerabilities in code submissions during pull requests.

1|1|Updated Mar 25, 2026

Search Tags:#security #vulnerabilities #threat-modeling #code-review #access-control #web-app

Ready to run

npx skills add https://github.com/penghang1223/niannian-workspace --skill -penghang1223

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: 安全检查清单
Source: https://github.com/penghang1223/niannian-workspace/tree/main/skills/security-checklist
Command: npx skills add https://github.com/penghang1223/niannian-workspace --skill -penghang1223

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This checklist helps teams systematically identify and remediate security vulnerabilities in code submissions, preventing common flaws from reaching production.

Core Features & Use Cases

Comprehensive checks across SQL injection, XSS, CSRF, data leakage, and access control.
Guided remediation with concrete examples and recommended fixes.
CI/CD integration to run checks on pull requests and builds.

Quick Start

Run the security checklist against the latest commit to identify and fix vulnerabilities before merging.

Frequently Asked Questions about 安全检查清单

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I identify security vulnerabilities in code submissions during a pull request?▼

To identify security vulnerabilities in code submissions, run a configurable security checklist against the latest commit. It systematically detects common flaws like SQL injection and XSS before merging.

What is the best way to check for SQL injection, XSS, and CSRF in web applications?▼

The best way to check for SQL injection, XSS, and CSRF in web applications is applying a comprehensive security audit. It validates access control and sensitive data handling using a configurable rule set.

Can I integrate a security checklist into my CI/CD pipeline to audit pull requests?▼

Yes, you can integrate this security checklist into your CI/CD pipeline. It is designed to run automated checks on pull requests and builds to prevent vulnerabilities from reaching production.

How do I remediate sensitive data leakage and access control flaws found in code reviews?▼

To remediate sensitive data leakage and access control flaws, this checklist provides guided remediation with concrete examples and recommended fixes directly addressing the identified vulnerabilities.

Does threat modeling help with configuring rules for web app security audits?▼

Threat modeling informs the configuration of rules for web app security audits. The checklist uses a configurable rule set to validate access control and detect vulnerabilities specific to your architecture.