security-review

Automate code review for security vulnerabilities and OWASP best practices.

Updated Dec 8, 2024
One-click install
npx skills add https://github.com/daehyunpy/my-nix-config --skill security-review-daehyunpy
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/daehyunpy/my-nix-config/tree/main/home-files/cursor/skills/security-review
Command: npx skills add https://github.com/daehyunpy/my-nix-config --skill security-review-daehyunpy

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps developers identify and fix security vulnerabilities in their code, ensuring robust protection against common threats like SQL injection, XSS, and data breaches.

Core Features & Use Cases

  • Comprehensive Checklist: Provides detailed checks for secrets management, input validation, authentication, and more.
  • Code Patterns: Offers secure code examples and highlights dangerous anti-patterns.
  • Use Case: Before deploying a new user authentication feature, run this Skill to ensure all security best practices are followed, from secure password handling to proper session management.

Quick Start

Use the security-review skill to audit the provided code for potential vulnerabilities.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check my code for security vulnerabilities before deployment?

To check code for security vulnerabilities before deployment, automate a review focusing on SQL injection, XSS, insecure authentication, and secrets management. This ensures adherence to OWASP guidelines and secure coding patterns for web applications and APIs.

What is the best way to audit web application authentication for security flaws?

The best way to audit web application authentication for security flaws is to run an automated review against a comprehensive checklist. This validates secure password handling, proper session management, and adherence to established security best practices.

How does automated code review handle secrets management and input validation?

Automated code review handles secrets management and input validation by scanning against detailed checks and secure code patterns. It identifies dangerous anti-patterns, verifies input sanitization, and ensures sensitive data is not exposed.

Can I use this security review to ensure my API follows OWASP guidelines?

Yes, you can use this security review to ensure your API follows OWASP guidelines. It automates the process of reviewing API code to confirm adherence to secure coding patterns and protects against common threats like data breaches.

What dangerous anti-patterns should I look for during a security code review?

During a security code review, you should look for dangerous anti-patterns such as improper input validation, insecure authentication flows, and hardcoded secrets. The review highlights these risks while offering secure code examples as alternatives.