bill-kotlin-code-review-security

What problem does it solve?

Kotlin code often carries secrets, authentication logic, and data-exposure risks that can slip through review without a formal guardrail. This Skill provides a structured security-focused review approach to detect and remediate secret leakage, weak auth/session handling, and unsafe data exposure in Kotlin code.

Core Features & Use Cases

• Secret leakage checks for keys, tokens, credentials, and sensitive strings across code, configs, and logs.
• Validation of authentication and authorization pathways to prevent token misuse and session gaps.
• Detection of insecure logging and data exposure, including PII and sensitive data in transit or at rest.
• Regression risk assessment for security-related changes in Kotlin applications and libraries.
• Guidance for aligning with project-specific security rules and compliance requirements.

Quick Start

Begin by scanning the Kotlin changes for secret leakage and authentication issues using the provided security-focused rules.