security-review

Identify and mitigate security risks across authentication, input handling, secrets, and API endpoints.

Updated Mar 1, 2026
One-click install
npx skills add https://github.com/derekhu0002/ai4pb-orchestrator --skill security-review-derekhu0002
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/derekhu0002/ai4pb-orchestrator/tree/main/.agents/skills/security-review
Command: npx skills add https://github.com/derekhu0002/ai4pb-orchestrator --skill security-review-derekhu0002

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

The Security Review Skill ensures code follows security best practices and identifies potential vulnerabilities across authentication, input handling, secrets, API endpoints, and payment features, centralizing a robust security standard.

Core Features & Use Cases

  • Comprehensive security checklist covering secrets management, input validation, injection prevention, CSRF protection, XSS defenses, and access control.
  • Threat-hunting and secure coding guidance for authentication, API endpoints, and payment features.
  • Practical verification steps and code examples to enforce secure patterns.

Quick Start

Run a security checklist across authentication, input handling, and secrets management to verify controls are correctly implemented.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review my code for authentication and input validation security risks?

To review code for authentication and input validation security risks, run a comprehensive security checklist that verifies secure code patterns, validates inputs, and prevents injection attacks across your software project. It provides practical verification steps and code examples to enforce secure coding standards.

What is the best way to prevent SQL injection and XSS vulnerabilities during development?

Preventing SQL injection and XSS vulnerabilities requires applying enforced secure coding patterns and input validation checks during development. This process uses a comprehensive security checklist to identify mitigation strategies and provides code examples to implement proper CSRF protection and injection defenses.

Can I use a security checklist to audit secrets management and API endpoint security?

Yes, you can use a security checklist to audit secrets management and API endpoint security by verifying controls are correctly implemented. It centralizes robust security standards to identify potential vulnerabilities across authentication, API endpoints, and payment features.

Does this security review cover threat modeling and compliance with secure coding best practices?

This security review does cover threat modeling and compliance with secure coding best practices by applying threat-hunting guidance across authentication and payment features. It enforces comprehensive standards including secrets handling, access control, and robust input validation.

How do I implement CSRF protection and access control in my software project?

To implement CSRF protection and access control in your software project, apply practical verification steps and secure code patterns provided by the checklist. It ensures proper defenses are integrated across development, testing, and deployment phases.