security-review

Identify and mitigate security risks across software development and deployment pipelines.

12|Updated Mar 22, 2026
One-click install
npx skills add https://github.com/aurorie-co/AURORIE-TEAMS --skill security-review-aurorie-co
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/aurorie-co/AURORIE-TEAMS/tree/main/teams/frontend/skills/security-review
Command: npx skills add https://github.com/aurorie-co/AURORIE-TEAMS --skill security-review-aurorie-co

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Security vulnerabilities threaten user data and project integrity. This skill provides a structured security review to help teams identify and remediate risks early in the software development lifecycle.

Core Features & Use Cases

  • Comprehensive security checklist covering authentication, authorization, input validation, secrets management, logging, and threat modeling.
  • Guardrails for secure coding practices across API endpoints, data handling, and third-party integrations.
  • Use case: during feature development or code review, run a security assessment to surface misconfigurations or insecure patterns before merge.

Quick Start

Run a security review on a new or existing codebase to identify and remediate critical vulnerabilities.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a comprehensive security review on my codebase before deployment?

A comprehensive security review systematically evaluates authentication, authorization, input validation, and secrets management across your codebase. It applies secure coding patterns and threat modeling to identify misconfigurations or insecure patterns before code merge.

What is threat modeling and how does it improve secure coding practices?

Threat modeling is a structured process to identify and mitigate security risks in software projects. It improves secure coding by proactively mapping potential vulnerabilities across API endpoints, data handling, and third-party integrations during development.

Does this security checklist cover authentication and secrets management validation?

Yes, the security checklist explicitly covers authentication, authorization, and secrets management. It also includes input validation and logging to ensure secure coding patterns are applied across API endpoints and third-party integrations.

When do I need to apply threat modeling and pre-deployment validation?

You should apply threat modeling and pre-deployment validation during feature development or code review. This timing surfaces security vulnerabilities and misconfigurations early in the software development lifecycle before they reach production.

What's the best way to identify security risks in third-party integrations?

The best way to identify security risks in third-party integrations is applying a structured security review. This process evaluates secure coding patterns, API endpoint configurations, and data handling protocols to mitigate vulnerabilities across deployment pipelines.