skills.rest
Bamose
BamoseCOMMUNITY
Explore all skills by this author →
GitHub

security-review

Apply security checklists to authenticate, validate inputs, manage secrets, and secure APIs and payments.

5|Updated Jan 20, 2026
Search Tags:#authorization#security#authentication#input-validation#web-security#secrets-management
One-click install
npx skills add https://github.com/Bamose/everything-codex-cli --skill security-review-bamose
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/Bamose/everything-codex-cli/tree/main/skills/security-review
Command: npx skills add https://github.com/Bamose/everything-codex-cli --skill security-review-bamose

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

The Security Review Skill helps teams identify and mitigate security risks early in development by providing a structured, repeatable security checklist that accompanies feature design and code review.

Core Features & Use Cases

  • Comprehensive security checklist covering authentication, input validation, secrets management, API security, and payments.
  • Reusable security patterns and best practices that can be applied to new features, services, and integrations.
  • Use Case: during feature design or code review, apply the checklist to uncover vulnerabilities and enforce secure defaults.

Quick Start

Run a security review on your new feature by applying the provided checklist to authentication, input handling, secrets, and API endpoints.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a security review on my web application code?▼

Perform a security review by applying a structured checklist to authentication, user input handling, secrets management, and API endpoints to identify and mitigate vulnerabilities across both backend and frontend components.

What security checklist should I use for reviewing authentication and API endpoints?▼

A comprehensive security checklist should enforce environment-based secrets, parameterized queries, input sanitization, CSRF protection, rate limiting, and secure error handling across authentication and API endpoints.

How do I ensure proper secrets management and input validation during feature design?▼

Ensure proper secrets management and input validation by enforcing environment-based secrets and applying strict data sanitization and parameterized queries during feature design and code review.

Does this security review approach cover payment-related features and third-party integrations?▼

Yes, this security review covers payment-related features and third-party integrations by applying best practices for access control, data handling, secure logging, and validation to these specific components.

What is the best way to mitigate security gaps in frontend and backend components?▼

The best way to mitigate security gaps is to apply a reusable security checklist that covers validation, access control, data handling, and secure error handling across both frontend and backend components.

When do I need to apply a security review checklist to my codebase?▼

You need to apply a security review checklist during feature design or code review to uncover vulnerabilities early, enforce secure defaults, and mitigate risks across new services and integrations.

Related Skills

Explore More Software Engineering Skills→
pshirshovpshirshov

bench-validate

Execute automated checklists, review code, and report benchmark run results.

Community
Advanced
PrimadetaautomationPrimadetaautomation
5

security-essentials

Identify and remediate codebase security vulnerabilities using OWASP-aligned guidance.

Community
Advanced
pacphipacphi
6

security-testing

Identify and validate security vulnerabilities in software applications.

Community
Advanced
AnsteorraAnsteorra
6

security-audit

Perform static and dynamic security audits on the KMP application.

Official
Advanced