security-review

Automate security reviews of authentication, secrets handling, and API integrations.

2|1|Updated Feb 5, 2026
One-click install
npx skills add https://github.com/forgivesam168/ai-dev-workflow --skill security-review-forgivesam168
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/forgivesam168/ai-dev-workflow/tree/main/skills/security-review
Command: npx skills add https://github.com/forgivesam168/ai-dev-workflow --skill security-review-forgivesam168

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill ensures security reviews are applied consistently across authentication, secrets handling, and deployment configurations, helping teams identify vulnerabilities early and reduce risk.

Core Features & Use Cases

  • Automated Security Checks: Enforces a comprehensive security checklist across code, infrastructure, and CI/CD.
  • Guided Remediation: Provides concrete patterns for secrets management, input validation, logging, and access control.
  • Use Case: When adding a new API endpoint, run this Skill to verify secrets handling, authorization, and secure deployment practices.

Quick Start

Run the security-review skill to scan your latest pull request for credentials leakage and insecure configurations, and generate a remediation plan.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate security reviews for authentication and secrets handling in my code?

Automated security reviews scan authentication, secrets handling, and API integrations to identify vulnerabilities. This process applies a comprehensive security checklist to code changes, infrastructure configurations, and deployment pipelines to generate a concrete remediation plan.

How do I scan a pull request for credentials leakage and insecure configurations?

Scanning a pull request for credentials leakage involves running an automated security check against the latest code changes. This verifies secrets management, input validation, and secure deployment practices, outputting a guided remediation plan for any identified vulnerabilities.

What security checks should I run when adding a new API endpoint?

When adding a new API endpoint, security checks should verify secrets handling, authorization, input validation, and secure deployment patterns. Running an automated review ensures access control, logging, and encryption practices satisfy comprehensive security checklist requirements.

Can I enforce a security checklist across both infrastructure configurations and CI/CD pipelines?

Yes, you can enforce a security checklist across infrastructure configurations and CI/CD pipelines. Automated security reviews cover software, cloud, and deployment contexts to ensure consistent access control, encryption, and secrets management across your entire stack.

What is the best way to harden code and identify vulnerabilities early in development?

The best way to harden code and identify vulnerabilities early is applying consistent automated security reviews. This enforces a comprehensive checklist covering secrets management, input validation, and logging across code and infrastructure to reduce risk.

Does automated security review provide concrete patterns for fixing access control and logging issues?

Yes, automated security review provides guided remediation with concrete patterns for fixing access control, logging, and encryption issues. It identifies vulnerabilities in authentication and API integrations, then supplies actionable patterns to resolve them.