security-review

Identify and remediate security vulnerabilities in code using a defined checklist.

Updated Apr 12, 2026
One-click install
npx skills add https://github.com/DrinkBoooz/PyTrade --skill security-review-drinkboooz
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/DrinkBoooz/PyTrade/tree/main/.opencode/skills/trading-creation-tool/ecc/skills/security-review
Command: npx skills add https://github.com/DrinkBoooz/PyTrade --skill security-review-drinkboooz

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill provides a structured approach to ensure code is developed with strong security practices, reducing the risk of vulnerabilities.

Core Features & Use Cases

  • Security checklist to evaluate authentication, authorization, secrets management, input validation, and API security.
  • Concrete patterns and examples for secure coding, secure configuration, and safe error handling.
  • Use Case: When adding a new feature, run this review to surface potential risks and implement mitigations before deployment.

Quick Start

Run this security review on your new feature to identify and fix authentication, input handling, secrets, and API security issues.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a security review on my code to check for vulnerabilities?

Run a security review by applying a structured checklist to evaluate authentication, authorization, secrets management, input validation, and API security within your codebase. This process identifies potential risks and provides concrete patterns for secure coding and safe error handling.

What does a comprehensive code security checklist include?

A comprehensive code security checklist includes evaluating authentication, authorization, secrets management, input validation, API security, and third-party integrations. It provides concrete patterns, secure configuration examples, and verification steps to remediate vulnerabilities during development.

How do I secure authentication and authorization in my software project?

To secure authentication and authorization, use a security review checklist to evaluate your current implementation, identify potential vulnerabilities, and apply concrete patterns for secure coding and configuration. This ensures robust access control before deployment.

When should I perform a security review for input validation and API security?

Perform a security review for input validation and API security when adding a new feature, before deployment. This early review surfaces potential risks and allows you to implement mitigations and safe error handling during development rather than after.

Can this security review identify vulnerabilities in third-party integrations?

Yes, the security review can identify and remediate vulnerabilities in third-party integrations. It evaluates these connections against a defined security checklist, providing concrete patterns and verification steps to ensure safe implementation.

What is the best way to manage secrets and prevent exposure in code?

The best way to manage secrets is by running a security review that specifically evaluates your secrets management practices against established patterns. This review surfaces potential exposure risks and provides concrete examples for secure configuration and safe handling.