security-pr-checklist-skill

Automate security PR reviews with authentication, input validation, and dependency checks.

5|Updated Dec 31, 2025

Search Tags:#checklist #security #compliance #gates #code-review #pr-review

Ready to run

npx skills add https://github.com/patricio0312rev/skillset --skill security-pr-checklist-skill-patricio0312rev

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-pr-checklist-skill
Source: https://github.com/patricio0312rev/skillset/tree/main/templates/security/security-pr-checklist-skill
Command: npx skills add https://github.com/patricio0312rev/skillset --skill security-pr-checklist-skill-patricio0312rev

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Creates a standardized approach to security review during PRs, ensuring consistent checks and reducing risk.

Core Features & Use Cases

Provides a comprehensive security PR checklist covering authentication, authorization, input validation, data protection, dependencies, secrets management, and error handling.
Supports automated gating by codifying security gates into PR workflows, enabling scalable, repeatable reviews.
Use Case: When reviewing a PR, apply the checklist to verify security best practices are met.

Quick Start

Promote consistent security reviews by generating and applying a PR checklist during code reviews.

Frequently Asked Questions about security-pr-checklist-skill

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I automate security checks in a pull request workflow?▼

Automating security checks in a pull request involves codifying security gates into your PR workflow to enforce consistent reviews. This standardizes validation across teams, ensuring repeatable and scalable threat modeling, compliance, and risk reduction.

What should be included in a security code review checklist?▼

A security code review checklist should include authentication, authorization, input validation, data protection, dependencies scanning, secrets management, and error handling. Codifying these areas as functional gates ensures comprehensive coverage during PR reviews.

Can I enforce security gates for code reviews across different projects?▼

Yes, you can enforce security gates for code reviews across different projects by applying a standardized PR checklist. This approach ensures consistent security best practices and compliance checks are met regardless of the specific team or project.

What is the best way to standardize PR security reviews and reduce risk?▼

The best way to standardize PR security reviews is to generate and apply a comprehensive security checklist during code reviews. This creates a standardized approach, enforcing consistent security gates to significantly reduce risk.

Do I need a threat modeling checklist for my PR review process?▼

Yes, integrating threat modeling into your PR review process is essential for identifying potential security vulnerabilities early. Applying a standardized security checklist during code reviews fulfills compliance checks and reduces overall risk.

How does secrets management validation work during a PR review?▼

Secrets management validation during a PR review works by applying a standardized checklist to verify that sensitive data is handled correctly. Codifying this check as a security gate ensures data protection and prevents unauthorized access.