skills.rest
cncoder
cncoderCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

security-review

Identify security vulnerabilities in codebases and deployments across authentication, input handling, and secrets management.

2|1|Updated Mar 4, 2026
Search Tags:#security#authentication#input-validation#code-review#secure-development#secrets-management
One-click install
npx skills add https://github.com/cncoder/oneclaw --skill security-review-cncoder
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/cncoder/oneclaw/tree/main/skills/security-review
Command: npx skills add https://github.com/cncoder/oneclaw --skill security-review-cncoder

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps teams embed security best practices into software development by providing a reusable security checklist and actionable patterns for authentication, input handling, secrets management, and API security.

Core Features & Use Cases

  • Security checklist templates for authentication, authorization, secrets handling, and secure coding practices.
  • Code patterns and examples for secure input validation, data protection, error handling, and secure logging.
  • Use Case: Integrate security reviews into CI/CD pipelines and code reviews to reduce vulnerabilities early in the development lifecycle.

Quick Start

Run a security review of your project and implement the patterns for authentication, input handling, and secrets management.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a security review on my codebase to check authentication and input handling?▼

To run a security review, apply a comprehensive security checklist to your codebase to identify vulnerabilities across authentication, input handling, and secrets management. This enforces guardrails for access control, rate limiting, and error handling.

What is secrets management in secure development and how does it protect API endpoints?▼

Secrets management in secure development involves enforcing guardrails for secrets rotation and access control to protect API endpoints. It ensures sensitive credentials are handled securely across data flows and third-party integrations.

Can I integrate these security checks into a CI/CD pipeline for continuous code review?▼

Yes, you can integrate these security checks into CI/CD pipelines and code reviews to reduce vulnerabilities early. The checks apply repeatable security patterns to common workflows, including API endpoints and secure deployment practices.

Does this security review process work for varied project types and third-party integrations?▼

Yes, the security review process applies a comprehensive security checklist to common workflows in varied project types. It effectively evaluates data flows, third-party integrations, and API endpoints to identify potential vulnerabilities.

What's the best way to enforce secure logging and error handling during a security review?▼

The best way to enforce secure logging and error handling is by applying actionable code patterns during the security review. This ensures logging privacy and proper error handling are integrated into your secure deployment practices.

Related Skills

Explore More Software Engineering Skills→
meirmmeirm
13

security-audit-example

Identify security vulnerabilities in code and configurations.

Community
Advanced
sunnypatneedisunnypatneedi
11

security-review

Conduct security code reviews to identify vulnerabilities across codebases.

Community
Advanced
thesimonhothesimonho
26

security-best-practices

Enforce security best practices in code reviews and CI/CD pipelines.

Community
Advanced
DevHive1DevHive1
18

security_scan

Orchestrate dependency, static analysis, and privacy dataflow scanners into prioritized reports.

Community
Advanced