security-review

Perform a security review by validating safe defaults, input sanitization, and least-privilege configurations across authentication and API endpoints. This skill provides a structured checklist to identify risks in secrets management and authorization before deploying user-facing applications.

Secrets management and rotation are enforced through written security checks and auditable logging. Running this skill validates secret handling and ensures sensitive data modules maintain safe defaults across development and deployment pipelines.

Input validation and least privilege are enforced by applying structured security patterns during feature integration. This skill checks input sanitization and authorization configurations to reduce risk in web and mobile scenarios.

Yes, this security review covers payment-related features and data-sensitive modules. It demands threat modeling and pattern guidance to protect payment flows and validate secure API design across testing and deployment pipelines.

Run an API security checklist before implementing or deploying features involving authentication or secrets. This ensures a robust security baseline by validating authorization, input handling, and API design early in the development lifecycle.