security-review

Enforce security checklists for authentication, input validation, and secrets management.

3|Updated Mar 17, 2026
One-click install
npx skills add https://github.com/idiaz01/enterprise-superpowers --skill security-review-idiaz01
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/idiaz01/enterprise-superpowers/tree/main/content/skills/security-review
Command: npx skills add https://github.com/idiaz01/enterprise-superpowers --skill security-review-idiaz01

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill helps engineering teams ensure code follows security best practices and identifies potential vulnerabilities across authentication, secrets handling, input validation, API design, and data handling.

Core Features & Use Cases

  • Comprehensive security checklist covering secrets management, input validation, SQL injection prevention, authentication and authorization, XSS protection, CSRF, rate limiting, and data exposure safeguards.
  • Automated security testing guidance and guardrails for pre-deployment checks, threat modeling, and incident readiness.
  • Applicable across API endpoints, cloud deployments, and CI/CD pipelines to harden software from development to production.

Quick Start

Activate this skill in your project to start enforcing security best practices during development.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I enforce a security checklist during code reviews?

Threat modeling identifies and mitigates potential security vulnerabilities before deployment. This skill provides threat modeling capabilities and automated guardrails to ensure secure-by-default deployments across your API endpoints and cloud infrastructure.

How do I prevent secrets exposure in CI/CD pipelines?

Preventing secrets exposure in CI/CD pipelines requires strict secrets management and access control validation. This skill enforces secrets management checks and access control hardening across your deployment workflows to protect sensitive credentials.

Can I use automated security guardrails for API design and cloud deployments?

Yes, you can use automated security guardrails for API design and cloud deployments. This skill supports applying security hardening across API endpoints, cloud deployments, and CI/CD pipelines to ensure secure-by-default configurations.

What is the best way to harden authentication and authorization in code?

The best way to harden authentication and authorization is applying a comprehensive security checklist during development. This skill enforces authentication and authorization checks, alongside XSS and CSRF protection, to secure your code from development to production.

Does this security review cover input validation and SQL injection prevention?

Yes, this security review covers input validation and SQL injection prevention. The skill enforces a comprehensive security checklist that specifically addresses input validation, SQL injection prevention, and data exposure safeguards across your projects.