security-review

Validate source code for common security vulnerabilities across multiple domains.

Updated May 28, 2026
One-click install
npx skills add https://github.com/Aytsuu/codemini --skill security-review-aytsuu
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/Aytsuu/codemini/tree/main/.agents/skills/security-review
Command: npx skills add https://github.com/Aytsuu/codemini --skill security-review-aytsuu

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires , and includes scripts (resource) and references (resource) components.

What problem does it solve?

Ensures your code adheres to security best practices, identifying and preventing vulnerabilities.

Core Features & Use Cases

  • Comprehensive Checklist: A step-by-step guide for implementing secure coding practices.
  • Checkpoints for Authentication, Input, and API Endpoints: Specialized sections for handling sensitive aspects of application development.
  • Pattern Implementation: Provides best practices and patterns to implement secure coding standards.
  • Use Case: Utilize the Skill when integrating payment gateways, authentication systems, and user data handling within applications.

Quick Start

Run 'security-review' to perform a full code audit against the security checklist.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a secure code audit against common vulnerabilities like SQL injection and XSS?

A security review validates source code for vulnerabilities like SQL injection and XSS by running a comprehensive checklist, covering input validation, authentication, and API endpoints to ensure secure coding best practices.

What security best practices should I follow when integrating payment gateways and authentication systems?

When integrating payment gateways and authentication systems, follow a comprehensive security checklist covering secret management, authentication, authorization, and input validation to ensure user data handling adheres to secure coding standards.

Does this code auditing process check for CSRF protection and API endpoint rate limiting?

Yes, the code auditing process includes specialized checkpoints for API endpoints, validating that CSRF protection and rate limiting mechanisms are properly implemented alongside authentication and authorization checks.

Do I need to set up environment variables for sensitive secrets before running a vulnerability identification check?

Yes, you need to configure environment setup for sensitive variables beforehand, as the vulnerability identification process assumes knowledge of secret management and checks for proper handling of these sensitive configurations.

What is the best way to implement secure coding patterns for user data handling in applications?

The best way to implement secure coding patterns is to apply provided best practice templates during development, utilizing specialized checkpoints to securely handle sensitive aspects like user data within your applications.