security-review

Name: security-review
Availability: InStock
Author: codelably

Enforce security best practices across codebases during development and reviews.

41|8|Updated Feb 7, 2026

Search Tags:#security #authentication #xss #input-validation #csrf #security-review #secure-coding

Ready to run

npx skills add https://github.com/codelably/harmony-claude-code --skill security-review-codelably

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/codelably/harmony-claude-code/tree/main/docs/zh-TW/skills/security-review
Command: npx skills add https://github.com/codelably/harmony-claude-code --skill security-review-codelably

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Ensures code meets security best practices across authentication, input handling, secrets management, API design, and payment-related features by providing a thorough security checklist and reusable patterns.

Core Features & Use Cases

Comprehensive security checklist covering key areas: key management, input validation, SQL injection prevention, authentication and authorization, XSS, CSRF, rate limiting, data exposure, and dependency safety.
Works across API development, microservices, and cloud-native apps to catch vulnerabilities during development and review cycles.
Use Case: when adding authentication or processing user input, apply the security review to harden the feature before merge.

Quick Start

Begin security reviews by applying the checklist to every new feature during code review.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I review code for security vulnerabilities during development?▼

Code security reviews identify and enforce best practices across authentication, input handling, secrets management, API design, and payment features by applying a structured checklist to catch vulnerabilities like SQL injection, XSS, and CSRF early before merge.

What is included in a comprehensive secure coding checklist?▼

A comprehensive secure coding checklist covers key management, input validation, SQL injection prevention, authentication, authorization, XSS, CSRF, rate limiting, data exposure, and dependency hygiene to ensure code meets security best practices across various features.

Can I apply security reviews to microservices and cloud-native apps?▼

Security reviews work across API development, microservices, and cloud-native apps to catch vulnerabilities during development and review cycles. You apply the structured checklist and automated checks when adding authentication or processing user input to harden features.

When do I need to run a security review on my codebase?▼

You need a security review when adding authentication, processing user input, managing secrets, designing APIs, or building payment-related features. Applying the checklist during code review cycles catches vulnerabilities early and ensures compliance with security best practices.

What's the best way to prevent SQL injection and XSS in API development?▼

The best way to prevent SQL injection and XSS in API development is to enforce input validation and apply structured security review patterns. The checklist covers key areas like data exposure, rate limiting, and authentication to harden features before merge.

How does dependency hygiene factor into code security reviews?▼

Dependency hygiene is a key area in code security reviews, ensuring that external libraries do not introduce vulnerabilities. The review checklist includes automated checks for dependency safety alongside input validation, IAM policies, and secrets management to maintain secure codebases.