skills.rest
andrew-starosciak
andrew-starosciakCOMMUNITY
Explore all skills by this author →
𝕏@andrewscodingGitHub

security-review

Reviews code for authentication, input handling, secrets, API endpoints, and payments risks.

2|1|Updated Oct 4, 2025
Search Tags:#authentication#input-validation#api-security#security-review#secret-management
One-click install
npx skills add https://github.com/andrew-starosciak/deep-algo --skill security-review-andrew-starosciak
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/andrew-starosciak/deep-algo/tree/main/.claude/docs/zh-TW/skills/security-review
Command: npx skills add https://github.com/andrew-starosciak/deep-algo --skill security-review-andrew-starosciak

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill provides a structured security review framework to help teams evaluate authentication, input handling, secret management, API design, and payment workflows.

Core Features & Use Cases

  • Security checklist: key management, access control, input validation, logging, and dependency hygiene.
  • Code review support: integrates security considerations into PR processes and design reviews.
  • Use Case: When adding a new API endpoint or feature, apply this skill to verify authorization, input validation, rate limiting, and secure data handling.

Quick Start

Review the target codebase against the security checklist, focusing on authentication, input validation, secret handling, API endpoints, and payments. Then document issues and remediation steps, and integrate checks into CI.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a security review on my API endpoints?▼

Perform a security review on API endpoints by evaluating authorization, input validation, rate limiting, and secure data handling against a structured checklist to identify and document vulnerabilities.

What is included in a code security checklist for authentication and secrets?▼

A code security checklist for authentication and secrets includes key management, access control, input validation, logging, and dependency hygiene to ensure comprehensive coverage during feature development.

When do I need to run an input validation and secret management check?▼

Run an input validation and secret management check when adding new features, designing APIs, reviewing pull requests, or configuring deployment workflows to proactively enforce secure coding practices.

Can I integrate security checks into my pull request review process?▼

You can integrate security checks into pull request reviews by applying the structured security checklist to verify authorization, input handling, and secret management before merging code changes.

What's the best way to secure payment workflows during code reviews?▼

The best way to secure payment workflows during code reviews is to evaluate them against a structured security framework covering data handling, access control, and logging to document and remediate issues.

Related Skills

Explore More Software Engineering Skills→
Snowflake-LabsSnowflake-Labs
12

read-ors-configuration

A concise summary of your roleplay character: name,</name> personality, and/or behavior, formatted as a single string sentence. Typically不超过50字，此处省略

Official
Intermediate
pradyumnasagarpradyumnasagar
6

agent-handoff

Automate inter-skill data transfer and provenance capture via JSON Material Passports.

Community
Advanced
sovriumsovrium
3

security-scanner

Identify security vulnerabilities in codebases via static analysis.

Official
Advanced
froggugugugufroggugugugu

security-scan

Execute SCA, SAST, DAST, and secret detection scans to report vulnerabilities.

Community
Advanced