security-review

Identify and remediate security vulnerabilities in codebases across authentication, authorization, input validation, secret management, and API security domains.

1|Updated Feb 24, 2026
One-click install
npx skills add https://github.com/devsepnine/hibi_ai --skill security-review-devsepnine
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/devsepnine/hibi_ai/tree/main/src/skills/security-review
Command: npx skills add https://github.com/devsepnine/hibi_ai --skill security-review-devsepnine

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill ensures all code follows security best practices and identifies potential vulnerabilities.

Core Features & Use Cases

  • Security checklist covering secrets management, input validation, SQL injection prevention, authentication/authorization, XSS, CSRF, rate limiting, sensitive data handling, dependency security, security testing, and pre-deployment checklists.

Quick Start

Run security-review on your codebase to automatically validate secrets handling and secure configurations.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I find and fix security vulnerabilities in my codebase?

To find and fix security vulnerabilities in your codebase, run an automated review that enforces best practices for secrets management, input validation, SQL injection prevention, and XSS mitigation.

What does a security code review cover for authentication and API security?

A security code review for authentication and API security covers enforcing best practices for authorization, rate limiting, sensitive data handling, and dependency security across your projects.

How do I validate secrets management and secure configurations before deployment?

You can validate secrets management and secure configurations before deployment by running an automated security check against your codebase to ensure compliance with pre-deployment security checklists.

Can I use a security checklist to prevent SQL injection and XSS in my projects?

Yes, you can use a security checklist to prevent SQL injection and XSS in your projects by enforcing strict input validation and secure coding best practices across all applicable codebases.

What is the best way to enforce OWASP security policies during development?

The best way to enforce OWASP security policies during development is to integrate an automated security review that identifies risks and validates authentication, authorization, and sensitive data handling.

Does a code security review check for CSRF protection and dependency security?

Yes, a code security review checks for CSRF protection and dependency security by validating that your codebase follows established best practices for preventing cross-site request forgery and managing vulnerable dependencies.