security-review

Review codebases against a security checklist for vulnerabilities.

Updated Feb 5, 2026
One-click install
npx skills add https://github.com/gugug168/claudecode-tutorial --skill security-review-gugug168
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/gugug168/claudecode-tutorial/tree/main/everything-claude-code-learning/02-Skills/security-review
Command: npx skills add https://github.com/gugug168/claudecode-tutorial --skill security-review-gugug168

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill ensures that all code follows security best practices and identifies potential vulnerabilities across the development lifecycle.

Core Features & Use Cases

  • Comprehensive security checklist covering secrets management, input validation, SQL injection prevention, authentication & authorization, XSS protection, CSRF defenses, rate limiting, error handling, dependency hygiene, and secure deployment practices.
  • Use cases include validating login flows, API endpoints, payment integrations, third-party API interactions, and data handling to prevent exposure and breaches.

Quick Start

Review the latest code changes against the security checklist to identify and remediate vulnerabilities before deployment.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a security code review to check for authentication and input validation vulnerabilities?

Run a security code review to evaluate authentication, user input handling, and API design against a comprehensive security checklist. It identifies vulnerabilities like SQL injection, XSS, and CSRF across modules and deployment pipelines so you can remediate issues before shipping code.

What security checks should I perform on API endpoints and payment integrations before deployment?

Security checks for API endpoints and payment integrations should cover secrets management, rate limiting, error handling, and dependency hygiene. Reviewing these workflows against a security checklist prevents data exposure and ensures secure third-party API interactions during deployment.

Does this security checklist cover secrets management and CSRF protection for login flows?

Yes, the security checklist covers secrets management and CSRF protection specifically for validating login flows. It enforces authentication and authorization best practices, ensuring user credentials and session tokens are handled securely across the codebase.

What is the best way to prevent SQL injection and XSS vulnerabilities across a codebase?

The best way to prevent SQL injection and XSS vulnerabilities is to apply security best practices across the entire codebase. Enforcing strict input validation and utilizing a comprehensive security checklist identifies and neutralizes injection risks in data handling and API endpoints.

Can I use this security review for dependency hygiene and secure deployment pipelines?

Yes, you can use this security review for dependency hygiene and secure deployment pipelines. The checklist explicitly evaluates dependency vulnerabilities and deployment configurations to ensure that code changes do not introduce risks during release.

Why does my code review miss rate limiting and error handling security flaws?

Your code review may miss rate limiting and error handling flaws because it lacks a comprehensive security checklist. Enforcing standardized security best practices ensures these protections, alongside authentication and input validation, are systematically verified before deployment.