security-review

Identify and mitigate security vulnerabilities in codebases through comprehensive security reviews.

Updated Apr 21, 2026
One-click install
npx skills add https://github.com/choub00/transformer --skill security-review-choub00
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/choub00/transformer/tree/main/.cursor/skills/security-review
Command: npx skills add https://github.com/choub00/transformer --skill security-review-choub00

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Security review ensures code handles secrets safely, validates inputs, and protects API endpoints.

Core Features & Use Cases

  • Comprehensive checklists for authentication, authorization, secret management, input validation, and secure API design.
  • Use cases include reviewing new services before deployment, auditing third-party integrations, and validating payment workflows.

Quick Start

Review a new API module for secrets handling, input validation, and access controls.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check my codebase for security vulnerabilities before deployment?

To check your codebase for security vulnerabilities, perform a comprehensive security review covering authentication flows, API endpoints, secret management, and input validation to ensure proper access controls are implemented.

What is the best way to audit payment integrations for secure secret management?

Auditing payment integrations for secure secret management involves validating that secrets are stored securely, API endpoints are protected, and comprehensive access controls are enforced across the payment workflow.

How do I ensure input validation and CSRF XSS mitigations are in place for my API?

Ensuring input validation and CSRF XSS mitigations requires running a security review that validates inputs, checks API endpoints for secure design, and verifies that cross-site request forgery protections are actively enforced.

Can I use a security review to audit third-party integrations and authentication flows?

Yes, you can use a security review to audit third-party integrations and authentication flows by applying comprehensive checklists that verify authorization mechanisms, access controls, and secure API design.

Does a security review work for both mobile apps and web applications?

Yes, a security review works for both mobile apps and web applications to identify and mitigate vulnerabilities across authentication flows, API endpoints, and secret management throughout the codebase.