security-review

Identifies security weaknesses in code and configurations for web apps and APIs.

1|Updated Feb 26, 2026

Search Tags:#checklist #security #authentication #input-validation #sql-injection #secrets-management #dependency-audit

Ready to run

npx skills add https://github.com/aberrantCode/llm_skills --skill security-review-aberrantcode

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/aberrantCode/llm_skills/tree/main/gemini/skills/security-review
Command: npx skills add https://github.com/aberrantCode/llm_skills --skill security-review-aberrantcode

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

It helps developers prevent security vulnerabilities by providing a thorough checklist and actionable patterns for authentication, input handling, secret management, API design, and payment features.

Core Features & Use Cases

Secrets Management: Detect hard‑coded credentials and enforce environment‑based storage.
Input Validation: Guide the use of schema validation (e.g., Zod) for all user‑provided data.
SQL Injection Prevention: Recommend parameterized queries and ORM best practices.
Authentication & Authorization: Ensure secure token handling, role checks, and row‑level security.
XSS, CSRF, Rate Limiting, Dependency Audits: Provide concrete implementations and verification steps.
Use Case: Apply this skill when building a new API endpoint that processes user‑submitted forms and interacts with a database.

Quick Start

Run the security-review skill to audit your project’s codebase for common vulnerabilities before deployment.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I prevent SQL injection and XSS vulnerabilities in my web API?▼

To prevent SQL injection and XSS vulnerabilities, enforce checklist items using parameterized queries, ORM best practices, and concrete verification steps for all user-submitted data processing endpoints.

What is the best way to manage hard-coded credentials and secrets in my application?▼

The best way to manage secrets is by detecting hard-coded credentials and enforcing environment-based storage, ensuring secure token handling and robust secrets management across your web application configurations.

How do I validate user input schema to secure API endpoints handling payments?▼

Validate user input schema by applying schema validation like Zod to all user-provided data, securing API endpoints that handle payments, authentication, and database interactions against malicious payloads.

Does this security checklist cover rate limiting and dependency audits for web applications?▼

Yes, this security checklist covers rate limiting and dependency audits, providing actionable patterns and concrete implementation steps to secure web applications and APIs before deployment.

Can I use this security review for API services that require authentication and role checks?▼

Yes, you can use this security review for API services requiring authentication by ensuring secure token handling, role checks, and row-level security to enforce proper authorization across user data.