security-review

To prevent SQL injection and XSS vulnerabilities, you need strict input validation, parameterized queries, and proper output encoding. This Skill provides comprehensive checklists and code patterns to identify risks and ensure your code adheres to security best practices.

Auditing authentication and authorization logic requires checking token management, session handling, and access controls against security standards. This Skill delivers detailed checklists to review user management modules and verify that all sensitive feature implementations are secure.

Securely managing secrets involves avoiding hardcoded credentials, using environment variables, and encrypting sensitive data at rest and in transit. This Skill identifies risks in secrets management and provides best practice guidance to protect user data from exposure.

Yes, security review for API endpoints covers rate limiting and CSRF prevention. This Skill provides patterns to secure newly created API endpoints, ensuring protections against cross-site request forgery and abusive request rates are properly implemented.

You can use this to check dependency security and blockchain vulnerabilities. This Skill includes specialized checklists covering dependency scanning and blockchain security patterns to identify risks in sensitive feature implementations before deployment.