security-review

Identify security vulnerabilities in codebases and deployment configurations.

Updated Aug 21, 2025
One-click install
npx skills add https://github.com/fromej-dev/excludr --skill security-review-fromej-dev
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/fromej-dev/excludr/tree/main/.claude/skills/security-review
Command: npx skills add https://github.com/fromej-dev/excludr --skill security-review-fromej-dev

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps developers identify security vulnerabilities and enforce security best practices across codebases and deployment configurations.

Core Features & Use Cases

  • Security Checklist: A comprehensive guide covering secrets management, input validation, authentication/authorization, secure configuration, logging, rate limiting, and threat modeling.
  • Guidance & Templates: Practical examples, templates, and guardrails for secure coding, API design, and deployment.
  • Use Case: When building an API, apply the security-review skill to verify secrets handling and input validation before merging changes.

Quick Start

Review a new API endpoint for proper secret handling and input validation.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review my codebase for security vulnerabilities before deployment?

To review your codebase for security vulnerabilities, apply a comprehensive security checklist covering input handling, secrets management, and authentication. This identifies flaws across codebases and deployment configurations to ensure secure software delivery.

What is threat modeling and how does it secure API design?

Threat modeling in API design involves applying practical guardrails and templates to anticipate security risks. It enforces best-practice security for authentication, authorization, and input validation before merging code changes.

How can I check if my secrets management configuration is secure?

You can check if your secrets management configuration is secure by applying a practical security checklist to verify proper secret handling. This enforces best practices across your deployment configurations and CI/CD pipelines.

Does this security review cover authentication and authorization checks?

Yes, security review covers authentication and authorization checks by providing practical templates and guardrails. This ensures access controls are properly enforced across your codebase and API endpoints.

Can I use a security checklist to validate input handling in my CI/CD pipelines?

You can use a security checklist to validate input handling and secure configuration within CI/CD pipelines. This provides operational guardrails to guide secure software delivery and deployment processes.

What is the best way to enforce secure coding practices across an existing codebase?

The best way to enforce secure coding practices is to apply comprehensive security templates and guardrails across the existing codebase. This identifies vulnerabilities and enforces standards for logging, API design, and rate limiting.