skills.rest
frap129
frap129COMMUNITY
Explore all skills by this author →
WebsiteGitHub

security-review

Identify and mitigate security vulnerabilities across authentication, input handling, and secrets management.

8|Updated Sep 7, 2021
Search Tags:#security#authentication#vulnerabilities#input-validation#rate-limiting#csrf#secrets-management
One-click install
npx skills add https://github.com/frap129/dotfiles --skill security-review-frap129
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/frap129/dotfiles/tree/main/.config/opencode/skills/security-review
Command: npx skills add https://github.com/frap129/dotfiles --skill security-review-frap129

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill provides a structured, repeatable approach to identifying and mitigating security vulnerabilities across authentication, input handling, secret management, API design, and payment-related features.

Core Features & Use Cases

  • Comprehensive security checklist covering secrets management, input validation, authentication & authorization, data handling, and secure deployment.
  • Preset patterns, verification steps, and real-world scenarios to guide secure coding and deployment.
  • Use Case: When starting a new feature, run the security review to generate a reusable security checklist and hardening plan.

Quick Start

Run a security review on a new feature to generate a policy checklist and remediation guidance.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a security review for authentication and input validation in my web application?▼

A security review systematically identifies and mitigates vulnerabilities by applying a structured checklist to authentication, input handling, and API design, generating preset patterns and verification steps for your web application.

What is the best way to ensure secrets management and environment-based configurations are secure?▼

The best way to ensure secure secrets management is to run a security review that verifies secrets are env-based, provides implementation patterns for safe API design, and checks that logs actively avoid storing sensitive data.

How do I check if my API design has CSRF protection and rate limiting in place?▼

To check API design for CSRF protection and rate limiting, apply a structured security checklist that verifies these mechanisms are in place, alongside validating input handling and authentication flows across your application.

Can I use this security review process for payment features across mobile and web applications?▼

Yes, you can use this security review process to identify and mitigate vulnerabilities specifically within payment features across both web and mobile applications by applying targeted verification steps.

When do I need a comprehensive security checklist for a new software feature?▼

You need a comprehensive security checklist when starting a new feature, enabling you to generate a reusable hardening plan that covers secrets management, data handling, and secure deployment from the beginning.

Related Skills

Explore More Software Engineering Skills→
riskikuller2020riskikuller2020

VibeSec-Skill

Apply security-focused coding guidance and vulnerability detection to web development tasks.

Community
Advanced
thesimonhothesimonho
26

security-best-practices

Enforce security best practices in code reviews and CI/CD pipelines.

Community
Advanced
hoanghn61hoanghn61

source-code-scanning

Scan source code and dependencies for vulnerabilities, secrets, and malicious code.

Community
Advanced
kjgarzakjgarza
3

security-pattern-check

Detect security vulnerabilities and anti-patterns in code with remediation guidance.

Community
Basic