security-review

Review code against a security checklist for web application vulnerabilities.

Updated Aug 23, 2026
One-click install
npx skills add https://github.com/dblodorn/dmbk-world --skill security-review-dblodorn
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/dblodorn/dmbk-world/tree/main/.agents/skills/security-review
Command: npx skills add https://github.com/dblodorn/dmbk-world --skill security-review-dblodorn

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps developers identify and mitigate security vulnerabilities in their code, ensuring robust protection against common threats.

Core Features & Use Cases

  • Security Best Practices: Provides a comprehensive checklist covering secrets management, input validation, SQL injection, XSS, CSRF, and more.
  • Code Auditing: Guides developers through a systematic review process to catch potential security flaws before deployment.
  • Use Case: Before deploying a new API endpoint that handles user data and interacts with a database, use this Skill to run through the security checklist and ensure all potential vulnerabilities are addressed.

Quick Start

Run the security-review skill to check the current codebase for common security vulnerabilities.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review my web application code for security vulnerabilities before deployment?

To review code for security vulnerabilities, use a systematic security checklist that addresses secrets management, input validation, SQL injection, XSS, and CSRF. This ensures your web application adheres to best practices before deployment.

What are the best practices for securing authentication and authorization in APIs?

Best practices for securing authentication and authorization in APIs include implementing robust validation, rate limiting, and proper authorization checks. Following a comprehensive security review checklist helps mitigate sensitive data exposure and unauthorized access.

How does a code review checklist help prevent SQL injection and XSS attacks?

A code review checklist helps prevent SQL injection and XSS attacks by guiding developers through systematic validation processes. It identifies potential security flaws in input handling and data rendering to ensure robust protection against common threats.

Can I use a security review checklist for both web applications and APIs?

Yes, you can use a security review checklist for both web applications and APIs. It facilitates secure development by addressing vulnerabilities like CSRF, rate limiting, and sensitive data exposure across different platforms and endpoints.

What is the most effective way to check my codebase for secrets management and data exposure issues?

The most effective way to check for secrets management and sensitive data exposure is running a comprehensive security review. This process audits your codebase against established patterns to catch potential flaws and protect user data.

When do I need to run a dependency security check during development?

You need to run a dependency security check during development before deploying new endpoints or features. Addressing dependency vulnerabilities early ensures your code adheres to security best practices and prevents potential exploitation.