review-security

Review web applications and API gateways for security vulnerabilities.

18|4|Updated Apr 5, 2026
One-click install
npx skills add https://github.com/louisbrulenaudet/monorepo-template --skill review-security-louisbrulenaudet
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: review-security
Source: https://github.com/louisbrulenaudet/monorepo-template/tree/main/.agents/skills/review-security
Command: npx skills add https://github.com/louisbrulenaudet/monorepo-template --skill review-security-louisbrulenaudet

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill identifies critical security vulnerabilities and configuration gaps in production-oriented monorepo architectures, ensuring compliance with industry standards and best practices.

Core Features & Use Cases

  • Security Header Analysis: Validates CSP, HSTS, and other critical HTTP security headers.
  • Validation & Secret Auditing: Checks for proper Zod schema usage and ensures no secrets are leaked in code or logs.
  • Use Case: Before deploying a new API route, run this Skill to verify that your CORS policy is restricted, input validation is enforced, and no sensitive data is exposed in error responses.

Quick Start

Use the review-security skill to perform a full security audit of the current repository.

Frequently Asked Questions about review-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit HTTP security headers for a production API gateway?

To audit HTTP security headers, this Skill analyzes CSP, HSTS, and other critical configurations to validate compliance and identify vulnerabilities in your web applications and API gateways.

What is the best way to check for leaked secrets in a Hono and Cloudflare monorepo?

Checking for leaked secrets in a Hono and Cloudflare monorepo involves auditing secret management to ensure no sensitive data is exposed in application code, logs, or error responses.

How do I validate Zod schema usage for input validation before deploying?

Validating Zod schema usage for input validation is performed by checking for proper schema enforcement across API routes, ensuring all inputs are strictly validated before deployment.

Does this security audit verify CORS configurations for production apps?

Yes, this security audit verifies CORS configurations for production apps by analyzing environment-specific protection requirements to ensure your cross-origin policies are properly restricted.

When do I need to run an automated security audit on my web application?

You need to run an automated security audit before deploying new API routes to verify restricted CORS policies, enforce input validation, and identify configuration gaps in production-oriented architectures.