security-review

Identify and remediate web application security vulnerabilities using an OWASP-based checklist.

Updated Aug 27, 2026

Search Tags:#authorization #security #authentication #owasp #auditing #input-validation #secrets-management

Ready to run

npx skills add https://github.com/Dedalus-ERP-PAS/hexagone-foundation-skills --skill security-review-dedalus-erp-pas

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/Dedalus-ERP-PAS/hexagone-foundation-skills/tree/main/skills/security-review
Command: npx skills add https://github.com/Dedalus-ERP-PAS/hexagone-foundation-skills --skill security-review-dedalus-erp-pas

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Audit and harden applications against common security vulnerabilities by applying a comprehensive OWASP-based checklist and remediation guidance.

Core Features & Use Cases

Comprehensive security checklist covering authentication, input validation, secrets management, CSRF, XSS, SQL injection, and exposure of sensitive data.
Step-by-step verification and remediation guidance adaptable to code, config, and deployment environments.
Use Case: evaluate a new API endpoint for misconfigurations and insecure data handling before release.

Quick Start

Run a security review on your web application using the built-in OWASP-based checklist to identify and remediate vulnerabilities.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I audit my web application for OWASP vulnerabilities like SQL injection and XSS?▼

To audit web applications for OWASP vulnerabilities like SQL injection and XSS, apply a comprehensive security checklist covering authentication, input validation, secrets management, and data exposure. This process provides structured verification steps and remediation guidance for code, configs, and deployments.

What is the best way to check my API endpoints for authentication and authorization misconfigurations before release?▼

The best way to check API endpoints for authentication and authorization misconfigurations is evaluating them against an OWASP-based security checklist. This verifies proper secret management, parameterized queries, CSRF protection, and safe error handling before release.

Does this security review process work for deployment configurations and runtime environments, or just source code?▼

Yes, this security review process works for deployment configurations and runtime environments, not just source code. It is adaptable to code reviews, API design, and deployment environments to identify and remediate security vulnerabilities across all scenarios.

How do I remediate insecure secret management and data exposure in my application?▼

To remediate insecure secret management and data exposure, follow structured verification steps that enforce proper secret handling and parameterized queries. The remediation guidance targets these specific vulnerabilities to harden your application against common attacks.

Can I use this security audit to verify CSRF protection and safe error handling in my codebase?▼

Yes, you can use this security audit to verify CSRF protection and safe error handling in your codebase. It enforces these specific requirements alongside input validation and secure authentication, providing actionable remediation guidance for any identified gaps.