security-review

Audits codebases for vulnerabilities in authentication, input handling, and secret management.

Updated Mar 21, 2026
One-click install
npx skills add https://github.com/hieuck/Pro5ChromeManager --skill security-review-hieuck
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/hieuck/Pro5ChromeManager/tree/main/.agents/skills/security-review
Command: npx skills add https://github.com/hieuck/Pro5ChromeManager --skill security-review-hieuck

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill helps teams ensure secure development by providing a comprehensive security review that covers secrets management, input validation, authentication, authorization, and safe coding patterns.

Core Features & Use Cases

  • Secrets management best practices and automated checks
  • Input validation and data sanitization guidance
  • Secure authentication/authorization patterns for APIs and services
  • Threat modeling and secure integration with third-party APIs
  • Use Case: When adding new authentication endpoints, this skill guides safe handling of credentials, token storage, and access controls.

Quick Start

Audit your codebase for secrets exposure and insecure input handling, then apply the recommended security patterns to your API endpoints.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit my codebase for secrets exposure and insecure input handling?

To audit your codebase for secrets exposure and insecure input handling, you can perform deterministic checks during development and deployment to identify vulnerabilities across authentication, input validation, and secret management. This enforces secure defaults and auditable outcomes for web services and APIs.

What is the best way to implement secure authentication patterns for API endpoints?

Secure authentication patterns for API endpoints are implemented by applying safe handling of credentials, token storage, and access controls. This approach ensures proper authorization and safe coding patterns when adding new authentication endpoints to your web services.

Can I use automated security checks for threat modeling and third-party API integrations?

Yes, you can use automated security checks for threat modeling and secure integration with third-party APIs. This process evaluates your workflows that process sensitive data, ensuring access control and secrets management best practices are met during development.

Does this code review process work for web services processing sensitive data?

Yes, this code review process works specifically for web services, APIs, and workflows that process sensitive data. It applies deterministic checks during development and deployment to enforce data sanitization, input validation, and safe coding patterns.

Why do I need input validation and data sanitization guidance for my web services?

Input validation and data sanitization guidance is needed to prevent security vulnerabilities in web services. It enforces secure defaults and safe coding patterns, ensuring that sensitive data processed by your APIs is handled correctly and auditable outcomes are maintained.