security-review

Audit application code and deployment configurations for security vulnerabilities.

1|Updated Mar 5, 2026

Search Tags:#security #authentication #input-validation #secrets-management #secure-coding #security-testing #cloud-security

Ready to run

npx skills add https://github.com/beratcelik1/compound-claude --skill security-review-beratcelik1

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/beratcelik1/compound-claude/tree/main/skills/security-review
Command: npx skills add https://github.com/beratcelik1/compound-claude --skill security-review-beratcelik1

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Ensures code and infrastructure changes do not introduce security vulnerabilities by providing a structured checklist and verification steps that cover secrets, input validation, authentication, infrastructure, and deployment practices.

Core Features & Use Cases

Comprehensive checklists for secrets management, input validation, SQL injection prevention, authentication/authorization, XSS/CSRF mitigation, rate limiting, dependency hygiene, and cloud infrastructure security.
Concrete verification steps and examples for common platforms (Next.js, Supabase, AWS/Cloudflare) and workflows (CI/CD, backups, IAM).
Use Case: Run this skill before merging or deploying new endpoints, payment flows, file upload features, or cloud infra changes to produce a prioritized remediation plan.

Quick Start

Run the security-review checklist to audit authentication, secrets, input validation, and deployment settings and produce a prioritized remediation report.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I check my application code for security vulnerabilities before deployment?▼

Pre-deployment security checks identify vulnerabilities by auditing secrets management, input validation, authentication, and cloud infrastructure, producing a prioritized remediation checklist for your codebase.

What is the best way to audit authentication and API endpoints for security issues?▼

Auditing authentication and API endpoints requires verifying CSRF and XSS protections, rate limiting, and parameterized database queries. A structured security review provides concrete verification steps and automated test examples for these checks.

Does this security review process work with Next.js, Supabase, and AWS infrastructure?▼

Yes, the security review process provides concrete verification steps and examples tailored for common platforms like Next.js, Supabase, AWS, and Cloudflare, covering workflows such as CI/CD and IAM.

How do I prevent SQL injection and manage secrets in my CI/CD pipeline?▼

Preventing SQL injection and managing secrets in CI/CD pipelines involves enforcing parameterized database queries and secure secrets handling. A pre-deployment security review verifies these requirements and checks dependency hygiene.

When do I need to run a security checklist for file uploads and payment flows?▼

You need to run a security checklist for file uploads and payment flows before merging or deploying new endpoints. This ensures input validation, row-level security, and secure logging requirements are satisfied.