security-review

Identifies security vulnerabilities in software projects and recommends remediation steps.

Updated Jan 24, 2026
One-click install
npx skills add https://github.com/feldboy/parlament-app --skill security-review-feldboy
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/feldboy/parlament-app/tree/main/.claude/skills/security-review
Command: npx skills add https://github.com/feldboy/parlament-app --skill security-review-feldboy

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill helps engineering teams ensure their codebase adheres to security best practices by identifying vulnerabilities, misconfigurations, and insecure patterns across authentication, input handling, secrets management, and API design.

Core Features & Use Cases

  • Security checklist driven reviews covering secrets, input validation, authentication, authorization, and logging.
  • Pattern guidance and example fixes for common vulnerabilities.
  • Use Case: When adding a new API endpoint or authentication flow, run this skill to surface security gaps and recommended remediation steps.

Quick Start

Review a new feature and generate a prioritized remediation plan based on the security checklist.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I identify security vulnerabilities in software projects before deployment?

Identify security vulnerabilities by running an automated security review against your codebase to surface insecure patterns in authentication, input handling, secrets management, and API design. This process enforces a comprehensive checklist to detect misconfigurations and provides actionable remediation guidance.

What is included in a security checklist for reviewing authentication and API endpoints?

A security checklist for authentication and API endpoints includes enforcing secure secrets management, input validation, authorization, rate limiting, logging, and secure configuration. Reviewing these areas ensures your codebase adheres to security best practices and surfaces gaps in new features.

How do I generate a remediation plan for insecure secrets management and input validation?

Generate a remediation plan by analyzing your codebase against a security checklist to identify insecure secrets management and input validation patterns. The review outputs prioritized, actionable guidance and example fixes to close security gaps in your application.

Does automated security review work for payment features and API design?

Automated security review works for payment features and API design by applying pattern guidance to detect insecure configurations across your codebase. It evaluates authentication flows, input handling, and logging to ensure sensitive financial endpoints adhere to security best practices.

What's the best way to review a new API endpoint for security gaps and insecure patterns?

The best way to review a new API endpoint is to run an automated security review that checks for insecure patterns in authentication, authorization, rate limiting, and input validation. This surfaces security gaps and generates a prioritized remediation plan based on established checklists.