security-review

Audit web application code for security vulnerabilities and coding standards.

2|1|Updated Mar 25, 2026
One-click install
npx skills add https://github.com/529-studio/Vmarble-Warehouse-Management-Client --skill security-review-529-studio
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/529-studio/Vmarble-Warehouse-Management-Client/tree/main/.agents/skills/security-review
Command: npx skills add https://github.com/529-studio/Vmarble-Warehouse-Management-Client --skill security-review-529-studio

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill mitigates the risk of critical vulnerabilities by providing a structured, expert-level security audit for your codebase, ensuring that sensitive operations are handled with industry-standard safety patterns.

Core Features & Use Cases

  • Vulnerability Prevention: Provides actionable checklists for SQL injection, XSS, and CSRF protection.
  • Secure Implementation Patterns: Offers verified code templates for secrets management, input validation, and authentication.
  • Use Case: Before merging a new API endpoint that handles user payments or sensitive data, use this skill to verify that your implementation follows secure coding standards and avoids common pitfalls.

Quick Start

Use the security-review skill to audit the current implementation of the user authentication module for potential vulnerabilities.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit my web application code for security vulnerabilities before deployment?

Security audits for production code identify vulnerabilities by enforcing strict coding standards and architectural best practices, providing actionable checklists for SQL injection, XSS, and CSRF protection. This ensures sensitive operations follow industry-standard safety patterns.

What is the best way to secure authentication systems and sensitive API endpoints?

Securing authentication systems and API endpoints requires verified code templates for secure token management, input validation, and secrets management. Applying these patterns prevents unauthorized access and ensures sensitive data handling routines comply with strict security standards.

How do I prevent SQL injection and XSS vulnerabilities in my web application?

Preventing SQL injection and XSS vulnerabilities involves enforcing parameterized queries and strict input validation. A comprehensive security review applies actionable checklists to verify your codebase follows secure coding standards and avoids common exploitation pitfalls.

Can I use this security review for sensitive data handling routines like payment processing?

Yes, security reviews are applicable for sensitive data handling routines including payment processing. Before merging new API endpoints, the audit verifies that your implementation follows secure coding standards, input validation, and comprehensive threat mitigation requirements.

Does a security audit check compliance with secure coding standards and token management?

A security audit checks compliance by verifying secure token management, parameterized queries, and input validation. It satisfies strict architectural best practices and ensures your authentication systems and API endpoints meet comprehensive threat mitigation requirements.

Why does my web application need a structured security audit before merging new API endpoints?

Your web application needs a structured security audit before merging new API endpoints to mitigate the risk of critical vulnerabilities. The review ensures sensitive operations adhere to industry-standard safety patterns and avoids common implementation pitfalls.