security-checklist

Identify and mitigate security vulnerabilities in code and configurations.

Updated Dec 4, 2025
One-click install
npx skills add https://github.com/eous/dotclaude --skill security-checklist-eous
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-checklist
Source: https://github.com/eous/dotclaude/tree/main/skills/security-checklist
Command: npx skills add https://github.com/eous/dotclaude --skill security-checklist-eous

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

The security checklist provides practical guidance to identify and prevent common vulnerabilities, helping teams build secure software from design through deployment.

Core Features & Use Cases

  • OWASP-aligned security checks for code reviews, authentication and authorization design, and secure configuration
  • Input validation, data handling, and secrets management patterns to reduce risk
  • Real-world use cases including threat modeling, secure coding practices, and secure deployment

Quick Start

Review your codebase for common security weaknesses and apply the recommended fixes.

Frequently Asked Questions about security-checklist

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I identify and mitigate security vulnerabilities in my codebase?

To mitigate security vulnerabilities, review your codebase for common weaknesses and apply best-practice fixes. This includes addressing input validation, CSRF, OWASP top 10 risks, and secure deployment configurations.

What is the best way to implement authentication and authorization design?

Authentication and authorization design is best implemented using OWASP-aligned security checks during code reviews. This approach ensures access controls and user permissions are securely configured across web applications and services.

How does secrets management prevent common vulnerabilities in web applications?

Secrets management prevents vulnerabilities by ensuring sensitive credentials are handled securely rather than exposed in code. Applying these patterns reduces risk during data handling and secure deployment processes.

Can I use this security checklist for threat modeling and secure coding practices?

Yes, you can use this checklist for threat modeling and secure coding practices. It provides practical guidance to build secure software from design through deployment, addressing encryption and input validation.

Does this security checklist cover OWASP top 10 guidance for code reviews?

Yes, this security checklist covers OWASP top 10 guidance specifically for code reviews. It helps identify and prevent common vulnerabilities by applying security controls to authentication, authorization, and configurations.