security-checklists

Provide domain-specific security checklists for vulnerability reviews.

Updated Mar 18, 2025
One-click install
npx skills add https://github.com/zzoohub/mealio --skill security-checklists
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-checklists
Source: https://github.com/zzoohub/mealio/tree/main/.claude/skills/security-checklists
Command: npx skills add https://github.com/zzoohub/mealio --skill security-checklists

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Security reviews often miss domain-specific gaps; this skill provides structured, domain-focused checklists to guide vulnerability assessments across authentication, API security, supply chains, and business logic.

Core Features & Use Cases

  • Includes dedicated checklists for Authentication & Authorization Security (auth.md), API Security (api.md), Business Logic Security (business-logic.md), and Supply Chain Security (supply-chain.md).
  • Helps security reviewers quickly reference relevant guidance during code reviews, secure API design, and supply chain audits.
  • Enables consistent, reusable review templates across projects.

Quick Start

Open the domain-specific checklists (auth.md, api.md, business-logic.md, supply-chain.md) and apply the guidance during security assessments.

Frequently Asked Questions about security-checklists

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
What is a security checklist for vulnerability assessments?

A security checklist for vulnerability assessments provides structured, domain-specific guidance to review codebases and deployments. It covers authentication, API security, supply chains, and business logic to ensure consistent vulnerability identification across projects.

How do I review API security vulnerabilities during code reviews?

To review API security vulnerabilities, reference a dedicated API security checklist during code reviews. This structured checklist guides reviewers through specific API threat vectors and secure design principles to identify domain-specific gaps.

Does this security checklist cover authentication and authorization reviews?

Yes, this security checklist covers authentication and authorization reviews. It includes a dedicated auth.md checklist that guides vulnerability assessments specifically for auth mechanisms within your codebase and deployments.

Can I use these security checklists for supply chain audits?

Yes, you can use these security checklists for supply chain audits. The supply-chain.md checklist provides specific guidance to help reviewers identify vulnerabilities during supply chain security assessments.

What is the best way to ensure business logic security during assessments?

The best way to ensure business logic security is applying a dedicated business-logic.md checklist during assessments. It guides reviewers through structured checks to identify domain-specific vulnerabilities in business logic implementations.

When do I need a structured security review template?

You need a structured security review template when performing vulnerability assessments across multiple projects. It enables consistent, reusable reviews and prevents domain-specific gaps in authentication, API, business logic, and supply chain security.