security-review

Perform a security review on a new API endpoint by validating token handling, secrets usage, input validation, authentication, authorization, and rate limiting. This skill provides a comprehensive vulnerability checklist covering those areas to ensure proper mitigation before deployment.

When handling sensitive data, check for vulnerabilities in secrets management, input validation, authentication, authorization, data handling, rate limiting, and safe logging. This skill provides a structured checklist and secure coding patterns to identify and remediate these specific issues across web apps and services.

Ensure proper secrets management and input validation before deployment by applying the comprehensive security checklist and secure defaults provided by this skill. It includes specific verification steps for secrets handling and input validation to mitigate vulnerabilities in new feature development.

Yes, you can use this security checklist to review payment-related flows and authentication. It is specifically designed to evaluate sensitive feature implementations, applying secure coding practices, vulnerability checks, and verification steps to ensure payment and authentication mechanisms are properly secured.

The best way to enforce secure coding practices across authentication and API endpoints is to apply a structured vulnerability checklist with secure defaults. This skill provides comprehensive patterns for authentication, token handling, and API security to remediate vulnerabilities across web apps and services.

No specific dependencies or components are required to run a secure coding review using this skill. It operates independently, providing a comprehensive vulnerability checklist, secure defaults, and verification steps for secrets, input validation, authentication, authorization, rate limiting, and safe logging without external requirements.