security-review

Review code against OWASP Top 10 security best practices.

Updated Feb 21, 2026
One-click install
npx skills add https://github.com/AndyHsuTW/everything-llm-workspace --skill security-review-andyhsutw
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/AndyHsuTW/everything-llm-workspace/tree/main/.agents/skills/security-review
Command: npx skills add https://github.com/AndyHsuTW/everything-llm-workspace --skill security-review-andyhsutw

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill addresses the critical need for robust security in software development by providing a comprehensive checklist and best practices to prevent vulnerabilities.

Core Features & Use Cases

  • Vulnerability Identification: Detects common security flaws across various development aspects.
  • Best Practice Enforcement: Guides developers to implement secure coding patterns for secrets management, input validation, SQL injection prevention, authentication, XSS, CSRF, rate limiting, and more.
  • Pre-Deployment Checklist: Offers a final verification step before releasing code to production.
  • Use Case: Before deploying a new API endpoint that handles user data, activate this skill to ensure all security best practices, from input validation to authentication, are rigorously followed.

Quick Start

Run the security-review skill to check the current codebase for common security vulnerabilities.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check my codebase for common security vulnerabilities before deployment?

To check for security vulnerabilities before deployment, run a comprehensive review covering secrets management, input validation, SQL injection, XSS, and CSRF. This ensures code adheres to OWASP Top 10 guidelines and platform-specific security best practices.

What is the best way to prevent SQL injection and XSS in web applications?

The best way to prevent SQL injection and XSS is to enforce secure coding patterns through input validation and proper output encoding. A security review checklist helps identify these common flaws and guides developers in implementing the necessary protective measures.

Does this security review cover authentication and authorization best practices?

Yes, this security review covers authentication and authorization best practices. It provides a comprehensive checklist that addresses these critical areas along with rate limiting and sensitive data exposure to ensure robust access control mechanisms.

How do I manage secrets and sensitive data exposure in my API endpoints?

To manage secrets and prevent sensitive data exposure in API endpoints, apply a pre-deployment security checklist. This verifies that best practices for secrets management and data protection are rigorously followed before releasing code to production.

When do I need a pre-deployment security checklist for software development?

You need a pre-deployment security checklist when preparing to release new features or API endpoints handling user data. It serves as a final verification step to ensure compliance with OWASP Top 10 and prevent vulnerabilities like CSRF and rate limiting issues.