sdcorejs-review-security-shared

Audit SDCoreJS agent workflows for security vulnerabilities with evidence-based findings.

2|Updated Apr 18, 2026
One-click install
npx skills add https://github.com/sdcorejs/sdcorejs-agent --skill sdcorejs-review-security-shared
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: sdcorejs-review-security-shared
Source: https://github.com/sdcorejs/sdcorejs-agent/tree/main/plugin/skills/sdcorejs-review-security-shared
Command: npx skills add https://github.com/sdcorejs/sdcorejs-agent --skill sdcorejs-review-security-shared

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

It helps catch common security mistakes in AI coding agent codebases before they ship by running a standardized, evidence-based security review across multiple SDCoreJS tracks.

Core Features & Use Cases

  • Cross-track security checklist: covers authentication, authorization, input validation, injection, secrets, transport security, dependency risk, and error/info leakage.
  • Stack-aware deepening: extends baseline checks with stack-specific guidance for Angular Portal, NestJS, and Next.js.
  • Evidence-first reporting: outputs Critical / Important / Minor findings with file:line references and includes a “Passed checklist items” signal.

Quick Start

Ask the AI to run a security review of the current changes before tagging a release.

Frequently Asked Questions about sdcorejs-review-security-shared

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a security review before a release?

Run a cross-track security audit by analyzing Git diffs and logs. This review checks authentication, injection, and dependency vulnerabilities, outputting structured Critical, Important, and Minor findings with file:line evidence.

What does an evidence-based security audit check for?

An evidence-based security audit requires grep-based proof to verify vulnerabilities. It checks for authorization gaps, input validation errors, secrets exposure, and transport security issues across Angular Portal, NestJS, and Next.js tracks.

Can I use this security check for third-party dependency integrations?

Yes, this security audit evaluates dependency risk during third-party integrations. It extends baseline checks with stack-specific guidance to identify vulnerabilities before you ship codebase changes.

How do I find injection and authorization vulnerabilities in NestJS?

Run a stack-aware security review to find injection and authorization vulnerabilities in NestJS. The audit gathers Git diff evidence and outputs structured findings with specific file:line references.

What is the best way to prepare an Angular Portal for a secure release?

The best way to secure an Angular Portal release is running a cross-track checklist audit. It validates error handling and info leakage, providing a passed checklist signal alongside structured vulnerability findings.

Why does my security review report show Minor and Critical findings?

Security review reports show Minor and Critical findings to categorize vulnerability severity. This structured output includes file:line references and grep-based proof, helping prioritize fixes for authentication, injection, and dependency risks.