security-review

Review software code against a security checklist for common vulnerabilities.

2|Updated Apr 1, 2024
One-click install
npx skills add https://github.com/bbaserdem/NixOS-Config --skill security-review-bbaserdem
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/bbaserdem/NixOS-Config/tree/main/home-manager/batuhan/apps/claude/skills/security-review
Command: npx skills add https://github.com/bbaserdem/NixOS-Config --skill security-review-bbaserdem

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill ensures your code adheres to robust security practices, proactively identifying and mitigating potential vulnerabilities before they can be exploited.

Core Features & Use Cases

  • Comprehensive Security Checklist: Covers secrets management, input validation, SQL injection prevention, authentication, XSS, CSRF, rate limiting, sensitive data exposure, blockchain security, and dependency management.
  • Best Practice Examples: Provides clear "do" and "don't" code examples for various security scenarios.
  • Use Case: Before deploying a new user authentication module, activate this skill to get a detailed checklist and code examples to ensure secure password handling, session management, and protection against common web attacks.

Quick Start

Use the security-review skill to audit the authentication logic for potential vulnerabilities.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I prevent SQL injection and XSS vulnerabilities in my code?

Implement robust input validation, parameterized queries, and output encoding to prevent SQL injection and XSS vulnerabilities. This security review checklist provides clear do and don't code examples to mitigate common web attacks.

What is the best way to audit authentication and authorization logic before deployment?

The best way to audit authentication logic is to use a comprehensive security checklist covering session management, password handling, and access control. This ensures secure coding practices are met and mitigates common vulnerabilities before deployment.

Does this security checklist cover secrets management and sensitive data exposure?

Yes, this security checklist thoroughly covers secrets management and sensitive data exposure. It provides best practice patterns to ensure sensitive information is protected and your code adheres to robust security standards.

How do I implement rate limiting and CSRF protection for web applications?

Implement rate limiting and CSRF protection by following established security best practice patterns. This review process provides actionable guidelines to secure your application against common web attacks and ensures proper request validation.

Can I use this to review blockchain security and dependency management?

Yes, you can use this review to evaluate blockchain security and dependency management. It addresses these critical areas to ensure your code mitigates vulnerabilities and adheres to comprehensive secure coding standards.