What problem does it solve? Codebases often ship with preventable vulnerabilities like SQL injection, hardcoded secrets, weak password hashing, and missing input validation. This Skill provides a structured security review framework that catches these issues before they reach production. ## Core Features & Use Cases - Vulnerability Detection: Identifies injection attacks, path traversal, hardcoded secrets, weak cryptography, and missing authentication checks with concrete bad/good code examples. - Security Audit Checklist: Provides a 12-point checklist covering parameterized queries, input validation, HTTPS enforcement, security headers, rate limiting, and dependency auditing. - Structured Review Output: Formats findings as Critical Issues, High Priority items, and Positive Patterns with line-specific fixes. - Use Case: Before merging a pull request that adds a new API endpoint handling user uploads, run a security audit to verify input validation, path sanitization, and proper authentication decorators are in place. ## Quick Start Review the authentication and file upload modules in this project for security vulnerabilities and list any critical issues with fixes.
