skills.rest
arusinova
arusinovaCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

security-review

Audit web application codebases for security vulnerabilities and best-practice controls.

Updated Aug 27, 2026
Search Tags:#security#authentication#vulnerability#input-validation#rate-limiting#csrf#secrets-management
One-click install
npx skills add https://github.com/arusinova/annarusinova-platform --skill security-review-arusinova
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/arusinova/annarusinova-platform/tree/main/.claude/skills/security-review
Command: npx skills add https://github.com/arusinova/annarusinova-platform --skill security-review-arusinova

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Security is often an afterthought; this skill helps ensure codebases meet security standards by providing a structured checklist and patterns.

Core Features & Use Cases

  • Comprehensive security checklist covering secrets management, input validation, authentication, CSRF, rate limiting, logging, and secure deployment.
  • Practical patterns and example snippets for secure coding, deployment, and threat modeling.
  • Use case: When introducing new API endpoints or handling sensitive data, apply this skill to audit and harden the implementation.

Quick Start

Audit a new API endpoint for best-practice security controls and generate a remediation plan.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit code for security vulnerabilities and best-practice controls?▼

To audit code for security vulnerabilities, apply a structured security checklist covering secrets management, input validation, authentication, CSRF, rate limiting, and logging sanitization to identify gaps and generate remediation steps.

What security checks should I perform when introducing new API endpoints?▼

Security checks for new API endpoints should include input validation, authentication and authorization verification, rate limiting configuration, CSRF protection, and secrets management to ensure sensitive data is hardened against threats.

How does a security checklist help harden payment features and authentication flows?▼

A security checklist helps harden payment features and authentication flows by enforcing standardized reviews of input handling, rate limiting, and secrets management, ensuring applications meet security best practices before deployment.

Can I use this approach to generate a remediation plan for input validation and CSRF vulnerabilities?▼

Yes, you can use this security review approach to audit input validation and CSRF vulnerabilities, which provides practical patterns and example snippets to generate a targeted remediation plan for your web application.

What is the best way to review logging sanitization and secure deployment configurations?▼

The best way to review logging sanitization and secure deployment configurations is to apply a comprehensive security checklist that audits these areas alongside authentication and secrets management to prevent data leakage.

Related Skills

Explore More Software Engineering Skills→
feldboyfeldboy

security-review

Identifies security vulnerabilities in software projects and recommends remediation steps.

Community
Advanced
iceflowericeflower
1

Spring Boot Security Rules

Configure Spring Security rules for Spring Boot applications.

Community
Advanced
kubonykubony
10

gcp-secret

Manage GCP Secret Manager secrets using gcloud CLI commands.

Community
Advanced
DCx7C5DCx7C5

pentest-SKILL.md

Identify and exploit security weaknesses in iOS and Android apps via OWASP MASTG.

Community
Advanced