skills.rest
flag3
flag3COMMUNITY
Explore all skills by this author →
Website𝕏@flag3833753GitHub

security-review

Audit authentication, input handling, secrets, and API endpoints against a security checklist.

1|Updated Mar 20, 2024
Search Tags:#security#authentication#secrets#input-validation#api-security#secure-coding
One-click install
npx skills add https://github.com/flag3/dotfiles --skill security-review-flag3
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/flag3/dotfiles/tree/main/.claude/skills/security-review
Command: npx skills add https://github.com/flag3/dotfiles --skill security-review-flag3

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill helps ensure code and API security by providing a comprehensive security checklist and best-practice patterns for authentication, input handling, secrets management, API design, and sensitive features.

Core Features & Use Cases

  • Security governance: checks for authentication, authorization, input validation, secrets handling, and secure data transmission.
  • Guided patterns: ready-to-use patterns for secure coding, secret rotation, and threat modeling.
  • Use Case: When shipping new endpoints or auth features, run this skill to audit security posture and generate a checklist.

Quick Start

Use the security-review skill to review an API endpoint adding authentication and secrets handling.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit authentication and secrets handling in my API code?▼

Security review audits authentication, input validation, secrets management, and API endpoints using a comprehensive checklist. It applies secure patterns like environment-based secrets, parameterized queries, and proper token handling to reduce risk across authentication, authorization, payments, and third-party integrations.

What security checks should I run before deploying new endpoints?▼

Run security review to check authentication mechanisms, input validation, secrets storage, and secure data transmission patterns. The skill generates a checklist covering authorization, token handling, and API design best practices for web apps, APIs, and microservices.

Can I use this to review existing codebases for security vulnerabilities?▼

Security review is applicable to codebases implementing authentication, authorization, payments, or third-party service integrations. It enforces environment-based secrets, input validation, and parameterized queries to identify and reduce security risks across your codebase.

What does input validation and parameterized queries prevent?▼

Input validation and parameterized queries prevent injection attacks and unauthorized data access. Security review guides you through these patterns as part of a comprehensive checklist covering secrets, token handling, and secure API design.

When should I run a security review on my code?▼

Run security review when shipping new authentication features, API endpoints, or integrations with third-party services. It provides a guided checklist and ready-to-use patterns for secure coding, secret rotation, and threat modeling.

Related Skills

Explore More Software Engineering Skills→
jamditisjamditis
359

security-checklist

Audit web applications against a pre-deployment security checklist.

Community
Basic
claude-office-skillsclaude-office-skills
368

Security Monitoring

Automate security monitoring, threat detection, and incident response workflows.

Official
Advanced
carlopezzutocarlopezzuto
3

security-review

Identify and remediate security risks in authentication, input handling, secrets, and API endpoints.

Community
Advanced
truongnattruongnat

senior-security

Perform STRIDE threat analysis and OWASP-guided vulnerability assessments.

Community
Advanced