security-review

Review codebases for security best practices across authentication, input handling, and secrets.

Updated Mar 16, 2026
One-click install
npx skills add https://github.com/Clean1ines/crm_bot --skill security-review-clean1ines
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/Clean1ines/crm_bot/tree/main/.agents/skills/ecc/security-review
Command: npx skills add https://github.com/Clean1ines/crm_bot --skill security-review-clean1ines

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Security reviews help teams ensure code follows best practices and catch vulnerabilities early before deployment.

Core Features & Use Cases

  • Comprehensive security checklist covering authentication, secrets, input validation, API endpoints, and payment features.
  • Real-world examples and patterns to apply in code reviews and CI/CD pipelines.
  • Use Case: A dev team integrates this skill into pull requests to automatically surface security gaps.

Quick Start

Perform a structured security review on your codebase using the included checklist and examples.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
What is a code security review and what areas does it cover?

A code security review enforces best practices across codebases to catch vulnerabilities early. This process covers authentication, secrets management, input handling, API endpoints, and payment features using structured checklists and practical code examples.

How do I perform a security review on my codebase before deployment?

Perform a security review by applying a comprehensive checklist to your codebase. Evaluate authentication, input validation, secrets management, API endpoints, and payment features, using real-world examples and measurable verification steps to reduce vulnerabilities.

Can I integrate security checks into pull requests to catch vulnerabilities early?

Yes, you can integrate security checks into pull requests to automatically surface security gaps. Development teams use this approach to ensure code follows best practices and catch vulnerabilities early before deployment using structured review patterns.

What's the best way to manage secrets and authentication during code reviews?

The best way to manage secrets and authentication is applying a structured security checklist during code reviews. This enforces best practices across authentication and secrets management, utilizing practical code examples to verify secure implementation.

Does this security review process apply to API endpoints and payment features?

Yes, the security review process directly applies to API endpoints and payment features. It enforces security best practices across these software project areas using structured checklists and measurable verification steps to reduce vulnerabilities.

When should I use threat modeling in my software engineering security review?

Use threat modeling during security reviews to identify and reduce vulnerabilities across authentication and API endpoints. It enforces best practices by satisfying structured checklists and applying practical code examples to software projects.