security-review

Identify security vulnerabilities in codebases during development and code reviews.

Updated Aug 27, 2026

Search Tags:#security #vulnerability #owasp #compliance #input-validation #code-review #secrets-management

Ready to run

npx skills add https://github.com/giuseppecutuli/speakdoc --skill security-review-giuseppecutuli

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/giuseppecutuli/speakdoc/tree/main/.claude/skills/security-review
Command: npx skills add https://github.com/giuseppecutuli/speakdoc --skill security-review-giuseppecutuli

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Identify security vulnerabilities in codebases and ensure secure design and implementation. Applied during software development, code reviews, API design, and deployment workflows to guide authentication, input handling, secrets management, and third-party integrations. It enforces a security-focused checklist and patterns that satisfy practices like secrets rotation, input validation, access control, CSP, CSRF protection, and secure logging.

Core Features & Use Cases

Security-focused checklist covering secrets management, input validation, authentication, access control, logging, and third-party integrations.
Step-by-step security review guidance during development, reviews, and deployments to enforce secure design and robust defenses.
Use Case: Incorporating security reviews into CI/CD pipelines to catch vulnerabilities before release.

Quick Start

Run the security review against your codebase to identify vulnerabilities and apply the recommended fixes.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I identify security vulnerabilities in my codebase during code reviews?▼

Security vulnerabilities are identified by applying a security-focused checklist covering input validation, secrets management, and authentication during code reviews. This enforces secure design patterns and guides robust defenses before deployment.

What security checks should I perform for API design and third-party integrations?▼

Security checks for API design should enforce input handling, access control, CSRF protection, and CSP. For third-party integrations, verify secure authentication and secrets rotation to prevent unauthorized access and data exposure.

How can I incorporate security reviews into CI/CD pipelines to catch vulnerabilities before release?▼

Incorporate security reviews into CI/CD pipelines by running automated security-focused checks against your codebase. This step-by-step guidance catches vulnerabilities related to input validation and secrets management before release.

What is the best way to enforce secrets rotation and input validation in software development?▼

The best way to enforce secrets rotation and input validation is by applying a security-focused checklist during development. This ensures secure design and implementation patterns are followed across authentication and access control workflows.

Does this security review approach cover OWASP compliance and secure logging practices?▼

Yes, this security review approach covers OWASP compliance by enforcing patterns for input validation, access control, and CSRF protection. It also guides secure logging practices to prevent sensitive data exposure.

Can I use this security checklist for deployment workflows and authentication guidance?▼

Yes, you can use this security checklist during deployment workflows to guide authentication, input handling, and secrets management. It ensures secure design and robust defenses are applied across the software development lifecycle.