skills.rest
terakoya76
terakoya76COMMUNITY
Explore all skills by this author →
Website𝕏@terakoya76GitHub

review-security

Review code for security best practices across authentication, secrets, and input validation.

Updated Sep 6, 2018
Search Tags:#security#authentication#review#secrets#best-practices#input-validation#api-security
One-click install
npx skills add https://github.com/terakoya76/terakoya76-playbooks --skill review-security-terakoya76
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: review-security
Source: https://github.com/terakoya76/terakoya76-playbooks/tree/main/roles/dotfiles/files/claude/skills/review-security
Command: npx skills add https://github.com/terakoya76/terakoya76-playbooks --skill review-security-terakoya76

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill provides a structured security review focused on authentication, handling user input, secrets management, API design, and payment-related features to ensure secure defaults and best practices across the codebase.

Core Features & Use Cases

  • Security checklist coverage for secrets management, input validation, authentication/authorization, request handling, logging, and dependency security.
  • Guidance for secure design decisions, secure coding patterns, and security-focused code reviews in development and CI workflows.
  • Use Case: when introducing a new API or service, apply the checklist to identify and remediate potential vulnerabilities before deployment.

Quick Start

Review a new module by applying the comprehensive security checklist to authentication, secrets, input handling, and API boundaries.

Frequently Asked Questions about review-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review code for security vulnerabilities in API authentication and secrets management?▼

To review code for security vulnerabilities, apply a structured checklist covering secrets management, input validation, and API authentication to enforce secure defaults across backend services and frontend boundaries.

What security best practices should I check when introducing a new API or microservice?▼

Security best practices for new APIs include enforcing access control, rate limiting, CSRF protection, input validation, and secure logging to remediate vulnerabilities before deployment in user data workflows.

Does this security review checklist apply to payment processing and external integrations?▼

Yes, this security review checklist applies to payment-related features and external integrations by specifying requirements for secrets management, validation, and secure design decisions across microservices.

How do I enforce input validation and access control during a security-focused code review?▼

To enforce input validation and access control during a security code review, apply structured checklist requirements to authentication boundaries, request handling, and logging workflows to ensure secure coding patterns.

What is the best way to automate dependency security checks in a CI workflow?▼

The best way to automate dependency security checks is integrating a security-focused review into CI workflows, applying a comprehensive checklist to identify vulnerabilities and enforce secure defaults before deployment.

Related Skills

Explore More Software Engineering Skills→
act70255act70255

gitlab-ci-patterns

Automate GitLab CI/CD pipeline configuration with multi-stage workflows and caching.

Community
Advanced
JCE-Joshhh77JCE-Joshhh77
16

security

Enforce secure coding practices for authentication, input validation, and secrets management.

Community
Advanced
riftzen-bitriftzen-bit

springboot-security

Identify and remediate security misconfigurations in Java Spring Boot services.

Community
Advanced
camgrimseccamgrimsec
3

dast-scanner

Run dynamic security scans on live web applications using Nuclei and OWASP ZAP.

Community
Advanced