security-review

Identify and mitigate security risks across authentication, input handling, and API design.

14|Updated Sep 22, 2025

Search Tags:#authorization #security #authentication #xss #input-validation #csrf #secrets-management

Ready to run

npx skills add https://github.com/gtheys/opencode --skill security-review-gtheys

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/gtheys/opencode/tree/main/coding/skills/security-review
Command: npx skills add https://github.com/gtheys/opencode --skill security-review-gtheys

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill helps engineering teams identify and mitigate security risks across authentication, input handling, and API design, reducing vulnerabilities and deployment risk.

Core Features & Use Cases

Secrets management and safe credential handling
Input validation, sanitization, and secure data processing
Authentication and authorization checks, with CSRF and XSS mitigations
Rate limiting, secure logging, and pre-deployment security guidance
Use Case: conduct a security review of a new API endpoint to detect credential exposure and misconfigurations

Quick Start

Provide a baseline security review checklist for a new project and apply it to your codebase.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I conduct a security review for a new API endpoint?▼

To conduct a security review for a new API endpoint, apply a comprehensive security checklist covering secrets management, input validation, authorization, and secure logging to detect credential exposure and misconfigurations.

What is included in a secure code review checklist for web applications?▼

A secure code review checklist for web applications includes enforceable steps for secrets management, input sanitization, access control, CSRF and XSS mitigation, rate limiting, and safe logging.

Can I use this security checklist workflow for serverless services?▼

Yes, you can use this security checklist workflow for serverless services, as it is specifically applicable to web apps, mobile backends, and serverless architectures requiring data validation and secrets management.

How do I mitigate XSS and CSRF vulnerabilities during development?▼

To mitigate XSS and CSRF vulnerabilities during development, implement enforceable security checks for input sanitization, secure data processing, and authentication validation across your software projects.

What's the best way to handle secrets management and prevent credential exposure?▼

The best way to handle secrets management and prevent credential exposure is to apply safe credential handling checks and pre-deployment security guidance to identify misconfigurations before release.