security-review

Automate security reviews for code, cloud infrastructure, and CI/CD pipelines.

1|Updated Mar 4, 2026

Search Tags:#code review #best practices #security #vulnerability #compliance #cloud security

Ready to run

npx skills add https://github.com/flatrick/mdt --skill security-review-flatrick

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/flatrick/mdt/tree/main/skills/security-review
Command: npx skills add https://github.com/flatrick/mdt --skill security-review-flatrick

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps developers identify and fix security vulnerabilities in their code, ensuring applications are robust against common threats and protecting sensitive user data.

Core Features & Use Cases

Comprehensive Checklist: Provides detailed checks for secrets management, input validation, SQL injection, XSS, CSRF, and more.
Cloud Security: Includes specific guidance for securing cloud infrastructure, IAM, and CI/CD pipelines.
Use Case: Before deploying a new feature that handles user payments, run this Skill to ensure all sensitive data is handled securely, authentication is robust, and the code is protected against common web vulnerabilities.

Quick Start

Use the security-review skill to perform a security audit on the current codebase.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I automate security reviews for code and cloud infrastructure?▼

Automate security reviews by running a comprehensive audit on your codebase to identify and fix vulnerabilities in secrets management, input validation, SQL injection, XSS, and CSRF. It enforces best practices through detailed checklists.

What's the best way to check for vulnerabilities before deploying user payment features?▼

Check for vulnerabilities by running a security audit on the codebase to ensure sensitive data is handled securely, authentication is robust, and the code is protected against common web vulnerabilities like XSS and CSRF.

Does this security review cover secrets management and dependency vulnerabilities?▼

Yes, security review covers both secrets management and dependency management. It also addresses authentication, authorization, rate limiting, sensitive data exposure, and blockchain security to ensure comprehensive code robustness.

Can I use this to secure my CI/CD pipelines and cloud IAM configurations?▼

Yes, you can use this to secure your CI/CD pipelines and cloud IAM configurations. It includes specific guidance for securing cloud infrastructure and enforces security best practices across your deployment pipelines.

What specific web vulnerabilities does an automated security audit address?▼

An automated security audit addresses SQL injection, XSS, and CSRF vulnerabilities. It also covers input validation, authentication, authorization, rate limiting, and sensitive data exposure to protect applications against common threats.

When do I need to perform a security audit on my codebase?▼

Perform a security audit on your codebase before deploying new features that handle sensitive user data, such as payment processing. This ensures robust authentication, secure data handling, and protection against common web vulnerabilities.