bill-kotlin-code-review-security

Identify Kotlin security issues for secrets, auth, and data exposure.

13|1|Updated Mar 16, 2026
One-click install
npx skills add https://github.com/Sermilion/skill-bill --skill bill-kotlin-code-review-security
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: bill-kotlin-code-review-security
Source: https://github.com/Sermilion/skill-bill/tree/main/platform-packs/kotlin/code-review/bill-kotlin-code-review-security
Command: npx skills add https://github.com/Sermilion/skill-bill --skill bill-kotlin-code-review-security

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Kotlin code often carries secrets, authentication logic, and data-exposure risks that can slip through review without a formal guardrail. This Skill provides a structured security-focused review approach to detect and remediate secret leakage, weak auth/session handling, and unsafe data exposure in Kotlin code.

Core Features & Use Cases

  • Secret leakage checks for keys, tokens, credentials, and sensitive strings across code, configs, and logs.
  • Validation of authentication and authorization pathways to prevent token misuse and session gaps.
  • Detection of insecure logging and data exposure, including PII and sensitive data in transit or at rest.
  • Regression risk assessment for security-related changes in Kotlin applications and libraries.
  • Guidance for aligning with project-specific security rules and compliance requirements.

Quick Start

Begin by scanning the Kotlin changes for secret leakage and authentication issues using the provided security-focused rules.

Frequently Asked Questions about bill-kotlin-code-review-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check Kotlin code for security issues during code review?

To check for secret leakage in Kotlin, scan your code, configurations, and logs for hardcoded keys, tokens, and credentials. Security-focused review rules help detect sensitive strings before they reach production.

How do I validate authentication and session safety in Kotlin applications?

Validating authentication safety in Kotlin requires checking authorization pathways to prevent token misuse and session gaps. You can enforce review checks against unsafe handling of authentication tokens and sensitive session data.

What is the best way to prevent insecure logging and data exposure in Kotlin?

Preventing insecure logging in Kotlin involves enforcing checks against logging PII and mishandling sensitive data in transit or at rest. Security guardrails during code review detect these exposure risks early.

Can I use this security review approach for Kotlin libraries handling tokens?

Yes, you can apply security review guardrails to Kotlin libraries handling authentication and tokens. The checks detect unsafe storage, transport, and secret leakage specifically within Kotlin library code.

How do I assess regression risks for security changes in Kotlin code?

Assessing regression risks for security changes in Kotlin involves validating that modifications to authentication logic and sensitive data handling do not introduce new secret leakage or session vulnerabilities.