security-checklist

Audit codebases for OWASP Top 10 security vulnerabilities with practical mitigations.

27|9|Updated Jan 20, 2026
One-click install
npx skills add https://github.com/sabahattink/antigravity-fullstack-hq --skill security-checklist-sabahattink
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-checklist
Source: https://github.com/sabahattink/antigravity-fullstack-hq/tree/main/skills/security-checklist
Command: npx skills add https://github.com/sabahattink/antigravity-fullstack-hq --skill security-checklist-sabahattink

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This checklist provides a structured approach to identify and mitigate security risks in codebases, helping teams prevent common vulnerabilities before deployment.

Core Features & Use Cases

  • Comprehensive reference to OWASP Top 10 risks (A01-A10) with pragmatic mitigations.
  • Guidance for input validation, secure configuration, dependency hygiene, rate limiting, CORS, secrets management, and secure logging.
  • Use during code reviews, API design reviews, and pre-deploy security audits to reduce risk and increase trust in software systems.

Quick Start

Run a quick security review of the API to identify OWASP Top 10 issues and generate a remediation plan.

Frequently Asked Questions about security-checklist

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit my codebase for OWASP Top 10 vulnerabilities during a code review?

A security audit checklist provides a structured approach to identify and mitigate OWASP Top 10 risks during code reviews, enforcing input validation, dependency hygiene, and secure configuration to prevent common vulnerabilities before deployment.

What is included in a pre-deploy security audit checklist for APIs?

A pre-deploy security audit checklist for APIs includes practical guidance on rate limiting, CORS, input validation, and secure secrets handling, providing concrete examples and templates to mitigate common vulnerabilities.

How do I check for secure secrets management and configuration before deployment?

You can check for secure secrets management and configuration by applying a security checklist that enforces secure secrets handling, secure logging, and dependency hygiene, ensuring sensitive data is protected before deployment.

Can I use this security checklist for API design reviews across modern tech stacks?

Yes, this security checklist is applicable for API design reviews and pre-deploy security checks across modern stacks, offering pragmatic mitigations and concrete templates for OWASP Top 10 risks like rate limiting and CORS.

What is the best way to implement rate limiting and input validation to prevent security risks?

The best way to implement rate limiting and input validation is by following a structured security checklist that provides concrete examples and pragmatic mitigations based on OWASP Top 10 guidance to reduce risk in software systems.