skills.rest
akourmaz
akourmazCOMMUNITY
Explore all skills by this author →
GitHub

checklist-security

Provide a role-specific security verification checklist for authentication, data protection, and API changes.

Updated Mar 2, 2026
Search Tags:#checklist#authorization#security#authentication#input-validation#api-security#secrets-management
One-click install
npx skills add https://github.com/akourmaz/translate2 --skill checklist-security
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: checklist-security
Source: https://github.com/akourmaz/translate2/tree/main/.agents/skills/checklist-security
Command: npx skills add https://github.com/akourmaz/translate2 --skill checklist-security

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This security verification checklist provides a structured, role-aware process to verify authentication, authorization, data protection, and related controls before changes are released.

Core Features & Use Cases

  • Structured checks covering authentication, authorization, input validation, API security, secrets management, and logging to prevent common vulnerabilities.
  • Role-based applicability allowing reviewers to tailor checks to different change types (auth changes, data processing, API integrations, payments, and data handling).
  • Use Case: Before deploying a new API endpoint or changing access controls, run the checklist to ensure all security controls are implemented and verifiable.

Quick Start

Review the authentication, authorization, and data protection controls in this checklist and tailor it to your project before deployment.

Frequently Asked Questions about checklist-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
What is a security verification checklist for API integrations and sensitive data changes?▼

A security verification checklist provides structured, role-aware checks for authentication, authorization, data protection, and logging to prevent vulnerabilities before deploying API integrations or processing sensitive data.

How do I verify authentication and authorization controls before a release?▼

Verify authentication and authorization controls by applying a ready-to-use checklist that enforces secure credential storage, proper session handling, and role-specific access reviews before releasing changes.

Does this security checklist support role-based checks for different types of changes?▼

Yes, the security checklist supports role-based applicability, allowing reviewers to tailor checks to specific change types including auth changes, data processing, API integrations, and payments involving PII.

What's the best way to review secrets management and input validation for a new endpoint?▼

The best way to review secrets management and input validation is using a comprehensive checklist that enforces secure storage of credentials and API security measures across token management and data protection.

When do I need to run a security verification checklist for payment and PII processing?▼

You need to run a security verification checklist when deploying changes involving payments or PII processing, ensuring coverage across data protection, secrets management, and auditing controls.

Why does my deployment lack proper session handling and API security measures?▼

Your deployment may lack proper session handling and API security measures if it was not verified against a structured checklist enforcing authentication requirements, input validation, and auditing controls before release.

Related Skills

Explore More Software Engineering Skills→
andrewvaughanandrewvaughan
12

hotfix

Create a fix branch, isolate the minimal change, and generate a PR for urgent issues.

Community
Advanced
rnavarychrnavarych
14

domain-ecommerce:pci-compliance

Guide e-commerce platforms through PCI DSS compliance levels and audit preparation.

Community
Advanced
kaustubhhiwarekaustubhhiware

security-reviewer

Audit code and cloud configurations for security vulnerabilities.

Community
Advanced
josemartinrodriguezmortalonijosemartinrodriguezmortaloni

securing-code

Scan Python code for SQL injection, hardcoded secrets, and command injection.

Community
Advanced