skills.rest
beratcelik1
beratcelik1COMMUNITY
Explore all skills by this author →
Website𝕏@beratcelik0GitHub

security-review

Audit application code and deployment configurations for security vulnerabilities.

1|Updated Mar 5, 2026
Search Tags:#security#authentication#input-validation#secrets-management#secure-coding#security-testing#cloud-security
One-click install
npx skills add https://github.com/beratcelik1/compound-claude --skill security-review-beratcelik1
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/beratcelik1/compound-claude/tree/main/skills/security-review
Command: npx skills add https://github.com/beratcelik1/compound-claude --skill security-review-beratcelik1

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Ensures code and infrastructure changes do not introduce security vulnerabilities by providing a structured checklist and verification steps that cover secrets, input validation, authentication, infrastructure, and deployment practices.

Core Features & Use Cases

  • Comprehensive checklists for secrets management, input validation, SQL injection prevention, authentication/authorization, XSS/CSRF mitigation, rate limiting, dependency hygiene, and cloud infrastructure security.
  • Concrete verification steps and examples for common platforms (Next.js, Supabase, AWS/Cloudflare) and workflows (CI/CD, backups, IAM).
  • Use Case: Run this skill before merging or deploying new endpoints, payment flows, file upload features, or cloud infra changes to produce a prioritized remediation plan.

Quick Start

Run the security-review checklist to audit authentication, secrets, input validation, and deployment settings and produce a prioritized remediation report.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check my application code for security vulnerabilities before deployment?▼

Pre-deployment security checks identify vulnerabilities by auditing secrets management, input validation, authentication, and cloud infrastructure, producing a prioritized remediation checklist for your codebase.

What is the best way to audit authentication and API endpoints for security issues?▼

Auditing authentication and API endpoints requires verifying CSRF and XSS protections, rate limiting, and parameterized database queries. A structured security review provides concrete verification steps and automated test examples for these checks.

Does this security review process work with Next.js, Supabase, and AWS infrastructure?▼

Yes, the security review process provides concrete verification steps and examples tailored for common platforms like Next.js, Supabase, AWS, and Cloudflare, covering workflows such as CI/CD and IAM.

How do I prevent SQL injection and manage secrets in my CI/CD pipeline?▼

Preventing SQL injection and managing secrets in CI/CD pipelines involves enforcing parameterized database queries and secure secrets handling. A pre-deployment security review verifies these requirements and checks dependency hygiene.

When do I need to run a security checklist for file uploads and payment flows?▼

You need to run a security checklist for file uploads and payment flows before merging or deploying new endpoints. This ensures input validation, row-level security, and secure logging requirements are satisfied.

Related Skills

Explore More Software Engineering Skills→
forgivesam168forgivesam168
2

security-review

Automate security reviews of authentication, secrets handling, and API integrations.

Community
Advanced
KrismithReddy12KrismithReddy12

ios-fix

Automate iOS bug resolution from source analysis to device verification.

Community
Advanced
statick88statick88
1

vulnerability-scanning

Automate vulnerability detection across code, dependencies, containers, and infrastructure.

Community
Advanced
balsm-healthbalsm-health
2

implementing-cloud-security-posture-management

Automate continuous security posture monitoring across AWS, Azure, and GCP.

Official
Advanced