security-checklist

Enforce security readiness checks before marking development tasks complete.

60|8|Updated Feb 15, 2026
One-click install
npx skills add https://github.com/albinotonnina/echos --skill security-checklist-albinotonnina
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-checklist
Source: https://github.com/albinotonnina/echos/tree/main/.hive/prompts/skills/security-checklist
Command: npx skills add https://github.com/albinotonnina/echos --skill security-checklist-albinotonnina

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Security-critical tasks often get marked as done without verifying key safeguards. This Skill provides a concise, repeatable checklist to ensure input validation, authentication, authorization, data handling, transport headers, and rate limiting are correctly implemented before closing a task.

Core Features & Use Cases

  • Structured checks across input validation, authentication, authorization, data handling, transport headers, and rate limiting.
  • PR & CI integration: attach the checklist to reviews and gate merges behind a safety feature flag.
  • Use Case: before merging a code change, run the checklist to confirm no sensitive data is logged and all queries are parameterised.

Quick Start

Invoke the security-checklist on a new task or PR to verify all items before marking it complete.

Frequently Asked Questions about security-checklist

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I enforce security readiness checks for authentication and authorization before merging code?

Security readiness checks enforce verification of authentication, authorization, input validation, and data handling before task completion. You can apply a structured checklist to confirm all safeguards are implemented and compliant prior to merging code changes.

What is the best way to verify input validation and data handling compliance in a PR review?

Verifying input validation and data handling compliance in a PR review involves attaching a structured security checklist to confirm parameterised queries and prevent sensitive data logging. This ensures deterministic checklist enforcement before marking tasks complete.

Can I integrate a security checklist into my CI pipeline to gate merges behind a safety feature flag?

Yes, you can integrate a security checklist into CI pipelines to gate merges behind a safety feature flag. This ensures authentication, transport headers, and rate limiting checks pass before allowing a code merge to proceed.

Does this security checklist cover rate limiting and transport headers for software development workflows?

Yes, this security checklist covers rate limiting and transport headers for software development workflows. It provides structured checks across these areas alongside input validation, authentication, authorization, and data handling to ensure full compliance.

When do I need to run a security checklist during code review?

You need to run a security checklist during code review when closing a task or before merging a code change. It ensures no sensitive data is logged and all queries are parameterised, enforcing safety prior to completion.

Why does my task get marked complete without verifying key security safeguards like parameterised queries?

Tasks often get marked complete without verifying key safeguards due to a lack of deterministic checklist enforcement. Applying a repeatable security checklist ensures input validation and data handling are correctly implemented before closing a task.