skills.rest
aberrantCode
aberrantCodeCOMMUNITY
Explore all skills by this author →
GitHub

security-review

Identifies security weaknesses in code and configurations for web apps and APIs.

1|Updated Feb 26, 2026
Search Tags:#checklist#security#authentication#input-validation#sql-injection#secrets-management#dependency-audit
One-click install
npx skills add https://github.com/aberrantCode/llm_skills --skill security-review-aberrantcode
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/aberrantCode/llm_skills/tree/main/gemini/skills/security-review
Command: npx skills add https://github.com/aberrantCode/llm_skills --skill security-review-aberrantcode

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

It helps developers prevent security vulnerabilities by providing a thorough checklist and actionable patterns for authentication, input handling, secret management, API design, and payment features.

Core Features & Use Cases

  • Secrets Management: Detect hard‑coded credentials and enforce environment‑based storage.
  • Input Validation: Guide the use of schema validation (e.g., Zod) for all user‑provided data.
  • SQL Injection Prevention: Recommend parameterized queries and ORM best practices.
  • Authentication & Authorization: Ensure secure token handling, role checks, and row‑level security.
  • XSS, CSRF, Rate Limiting, Dependency Audits: Provide concrete implementations and verification steps.
  • Use Case: Apply this skill when building a new API endpoint that processes user‑submitted forms and interacts with a database.

Quick Start

Run the security-review skill to audit your project’s codebase for common vulnerabilities before deployment.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I prevent SQL injection and XSS vulnerabilities in my web API?▼

To prevent SQL injection and XSS vulnerabilities, enforce checklist items using parameterized queries, ORM best practices, and concrete verification steps for all user-submitted data processing endpoints.

What is the best way to manage hard-coded credentials and secrets in my application?▼

The best way to manage secrets is by detecting hard-coded credentials and enforcing environment-based storage, ensuring secure token handling and robust secrets management across your web application configurations.

How do I validate user input schema to secure API endpoints handling payments?▼

Validate user input schema by applying schema validation like Zod to all user-provided data, securing API endpoints that handle payments, authentication, and database interactions against malicious payloads.

Does this security checklist cover rate limiting and dependency audits for web applications?▼

Yes, this security checklist covers rate limiting and dependency audits, providing actionable patterns and concrete implementation steps to secure web applications and APIs before deployment.

Can I use this security review for API services that require authentication and role checks?▼

Yes, you can use this security review for API services requiring authentication by ensuring secure token handling, role checks, and row-level security to enforce proper authorization across user data.

Related Skills

Explore More Software Engineering Skills→
realsigridjinrealsigridjin
20

security-review

Identify and prioritize security vulnerabilities with OWASP Top 10 analysis.

Community
Advanced
wonderslifewonderslife
13

expert-security

Identify and remediate code vulnerabilities in web and backend systems.

Community
Advanced
I-OnlabsI-Onlabs
3

code-auditor

Audit codebases across architecture, quality, security, and performance to produce prioritized health reports.

Community
Advanced
AnsteorraAnsteorra
6

security-audit

Perform static and dynamic security audits on the KMP application.

Official
Advanced