security-review

Review code for authentication, input validation, and secrets management vulnerabilities.

112|9|Updated Jan 23, 2026

Search Tags:#code review #security #authentication #vulnerability #input validation #secure coding

Ready to run

npx skills add https://github.com/hellangleZ/burn-in-cceverywhere-ralph --skill security-review-hellanglez

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/hellangleZ/burn-in-cceverywhere-ralph/tree/main/skills/security-review
Command: npx skills add https://github.com/hellangleZ/burn-in-cceverywhere-ralph --skill security-review-hellanglez

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill proactively identifies and mitigates security risks in your code, ensuring robust protection against common and advanced threats.

Core Features & Use Cases

Comprehensive Checklist: Covers secrets management, input validation, SQL injection, XSS, CSRF, and more.
Best Practice Enforcement: Provides clear "Do This" vs. "Never Do This" examples for secure coding.
Use Case: Before deploying a new API endpoint that handles user data, run this skill to ensure all inputs are validated, secrets are not exposed, and proper authorization checks are in place.

Quick Start

Run a security review on the current codebase to identify potential vulnerabilities.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I conduct a security review for code handling sensitive user data?▼

To conduct a security review for sensitive user data, analyze authentication flows, enforce input validation, verify secrets management, and apply OWASP Top 10 principles to prevent vulnerabilities like SQL injection and XSS.

What is the best way to check for secrets management and input validation issues before deployment?▼

The best way to check for secrets management and input validation issues is to run a comprehensive security review that compares your implementation against secure coding best practices, ensuring secrets are not exposed and all API inputs are validated.

How does this security review process identify common web vulnerabilities like XSS and CSRF?▼

The security review process identifies web vulnerabilities like XSS and CSRF by applying a comprehensive checklist based on OWASP Top 10 principles, enforcing clear secure coding practices and authorization checks across all software development phases.

Can I use this security review approach for all software development phases?▼

Yes, you can use this security review approach for all software development phases, as it proactively identifies and mitigates security risks by focusing on authentication, input validation, and vulnerability prevention whenever handling sensitive data.

What are the limitations of relying solely on a code review for vulnerability prevention?▼

A limitation of relying solely on code review for vulnerability prevention is that while it enforces secure coding practices and identifies risks like injection flaws, it must be integrated with continuous testing to ensure robust protection against advanced threats.

Why do I need to check authorization and input validation for new API endpoints?▼

You need to check authorization and input validation for new API endpoints to ensure robust protection against common threats, preventing unauthorized access and mitigating vulnerabilities before deploying code that handles user input.