security-review

Review codebases against a security checklist for authentication, authorization, and secrets management.

Updated Jan 1, 2026
One-click install
npx skills add https://github.com/ChanningHe/dotfiles --skill security-review-channinghe
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/ChanningHe/dotfiles/tree/main/claude/skills/security-review
Command: npx skills add https://github.com/ChanningHe/dotfiles --skill security-review-channinghe

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps teams ensure code security by providing a comprehensive review framework and actionable patterns to mitigate vulnerabilities.

Core Features & Use Cases

  • Security checklist covering secrets management, input validation, authentication, authorization, and data handling.
  • Patterns for secure coding, threat modeling, and secure API design.
  • Use cases include integrating into CI/CD pipelines, performing code reviews, and security audits across authentication, API endpoints, and sensitive data handling.

Quick Start

Start a security review by consulting the comprehensive checklist and applying the patterns to your authentication, secrets, and API design.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a security code review for authentication and API endpoints?

Perform a security code review by consulting a comprehensive checklist that enforces best practices for authentication, API endpoints, and secrets management. This framework provides actionable patterns to identify vulnerabilities and ensure defensive coding across codebases.

What is secure coding for secrets management and input validation?

Secure coding for secrets management and input validation involves applying defensive patterns to mitigate vulnerabilities. It requires checking code against a security checklist to ensure sensitive data handling and user inputs are properly sanitized and protected.

Can I integrate security reviews into a CI/CD pipeline for automated code audits?

Yes, you can integrate this security review framework into CI/CD pipelines for automated code audits. It supports performing continuous security checks across authentication, API endpoints, and sensitive feature implementations during the build process.

Does this security checklist cover authorization and threat modeling?

Yes, the security checklist covers both authorization and threat modeling. It enforces security best practices across authentication, input handling, and data handling, providing actionable patterns to mitigate vulnerabilities in sensitive feature implementations.

What's the best way to enforce defensive coding patterns across a codebase?

The best way to enforce defensive coding patterns is by applying a comprehensive security checklist to code reviews and audits. This framework targets authentication, secrets management, and API endpoints to systematically identify and mitigate vulnerabilities.