security-review

Review code and cloud infrastructure for security vulnerabilities against OWASP guidelines.

Updated Jan 27, 2026
One-click install
npx skills add https://github.com/AtlasRoX/super-fiesta --skill security-review-atlasrox
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/AtlasRoX/super-fiesta/tree/main/skills/security-review
Command: npx skills add https://github.com/AtlasRoX/super-fiesta --skill security-review-atlasrox

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps developers identify and mitigate security vulnerabilities in their code, ensuring robust protection against common and advanced threats.

Core Features & Use Cases

  • Comprehensive Checklist: Covers secrets management, input validation, SQL injection, XSS, CSRF, and more.
  • Code Examples: Provides clear "do" and "don't" examples for secure coding practices.
  • Cloud Security: Includes specific guidance for securing cloud infrastructure and CI/CD pipelines.
  • Use Case: Before deploying a new API endpoint that handles user data, run this Skill to ensure all security best practices are followed, from input validation to proper authentication.

Quick Start

Run a security review on the current codebase to identify potential vulnerabilities.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I conduct a security review for my web application code?

A security review identifies vulnerabilities by checking code and cloud infrastructure against OWASP guidelines, covering secrets management, input validation, authentication, and network security to ensure robust protection against common threats.

How do I secure cloud infrastructure and CI/CD pipelines during code review?

Securing cloud infrastructure and CI/CD pipelines during review involves applying cloud provider security benchmarks to validate secrets management, network configurations, and authorization controls across your cloud deployments.

What security vulnerabilities should I check before deploying a new API endpoint?

Before deploying a new API endpoint, check for vulnerabilities including broken authentication, authorization flaws, SQL injection, XSS, and CSRF to ensure user data is protected according to secure coding best practices.

Does this security review cover secrets management and authentication checks?

Yes, the security review covers secrets management and authentication checks, utilizing a comprehensive checklist to validate proper access controls and credential handling practices across web applications and APIs.

What is the best way to ensure my code adheres to OWASP guidelines?

The best way to ensure code adheres to OWASP guidelines is to run a structured review validating input validation, authentication, and data protection mechanisms against a comprehensive checklist of common and advanced threats.