security-review

Enforce security best practices for authentication, input handling, and secret management.

Updated Aug 23, 2026
One-click install
npx skills add https://github.com/chofurenairengo/emotion-readar --skill security-review-chofurenairengo
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/chofurenairengo/emotion-readar/tree/main/.claude/skills/security-review
Command: npx skills add https://github.com/chofurenairengo/emotion-readar --skill security-review-chofurenairengo

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Insecure implementations of authentication, input handling, and secret management create risk across apps. This skill provides a practical security checklist and reusable patterns to reduce vulnerabilities during development, review, and deployment.

Core Features & Use Cases

  • Comprehensive security checklist covering secrets management, input validation, authentication and authorization, CSRF, rate limiting, logging privacy, and secure error handling.
  • Guidance for secure API design, secure session management, and safe interaction with third-party services.
  • Use Case: Integrate these checks into code reviews and CI pipelines to catch common security flaws early.

Quick Start

Review the new authentication flow and secrets handling in your repository and apply the checklist to close critical gaps.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
What is secure coding for authentication and input validation?

Secure coding for authentication and input validation involves enforcing best practices across user input handling, secrets management, and API design. Applying a comprehensive security checklist during development and code reviews reduces common application vulnerabilities.

How do I implement a security checklist for code reviews?

Implement a security checklist for code reviews by applying reusable patterns to secrets management, input validation, authorization, CSRF, and rate limiting. Integrating these checks into your CI pipeline catches common security flaws early during development.

Can I use these security patterns for API design and session management?

Yes, you can use these security patterns for API design and session management. The skill provides specific guidance for secure API design, session management, and safe interaction with third-party services to close critical security gaps.

What's the best way to manage secrets and handle input validation securely?

The best way to manage secrets and validate input securely is by applying proven coding patterns directly within your repository. Using structured checklist templates ensures critical gaps in secrets handling and input validation are consistently closed.

Does this security review approach work for CI checks and deployment?

Yes, this security review approach works for CI checks and deployment. It is specifically applicable during development, code reviews, and CI checks to enforce authentication, input handling, and secure logging best practices across your codebase.