skills.rest
ignidus
ignidusOFFICIAL
Explore all skills by this author →
WebsiteGitHub

security-review

Identify and remediate security vulnerabilities across authentication, inputs, secrets, and APIs.

Updated Mar 18, 2026
Search Tags:#security#authentication#vulnerability#xss#input-validation#csrf#secrets-management
One-click install
npx skills add https://github.com/ignidus/iscagent --skill security-review-ignidus
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/ignidus/iscagent/tree/main/skills/security-review
Command: npx skills add https://github.com/ignidus/iscagent --skill security-review-ignidus

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill ensures secure coding practices by systematically identifying and mitigating vulnerabilities across authentication, input handling, secrets management, API design, and sensitive feature implementations.

Core Features & Use Cases

  • Scans for insecure secret handling and enforces secrets management best practices.
  • Validates authentication and authorization patterns, including token handling and RBAC.
  • Enforces input validation, output encoding, and safe data handling to prevent injection and leaks.
  • Provides a comprehensive security checklist and reusable patterns for Next.js, API servers, and cloud integrations.

Quick Start

Activate this skill during authentication, input handling, secret management, API work, or payment features to apply security patterns across your codebase.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my codebase for authentication and authorization vulnerabilities?▼

To scan for authentication and authorization vulnerabilities, you systematically review token handling and RBAC patterns. This process applies security checklists to validate access controls and ensure compliant backend deployments.

What is the best way to prevent XSS and injection attacks in API servers?▼

Preventing XSS and injection attacks requires strict input validation and output encoding. Enforcing safe data handling patterns across your API servers mitigates these risks before they reach sensitive features or data storage.

How do I check if my secrets management practices are secure?▼

Checking secrets management security involves scanning for insecure secret handling and enforcing best practices. This review identifies exposed credentials and guides you through secure storage and deployment configurations.

Does this security review process work with Next.js and cloud integrations?▼

Yes, this security review process works with Next.js and cloud integrations. It provides reusable security patterns and checklists specifically designed to validate third-party integrations and frontend forms.

When do I need to perform a comprehensive security review on my APIs?▼

You need a comprehensive security review on your APIs when implementing authentication, input handling, or payment features. Applying security patterns during these development phases ensures safe data handling and prevents leaks.

Related Skills

Explore More Software Engineering Skills→
adamaslanadamaslan

codebase-navigator

Navigate Next.js frontend and Python MCP backend project structures.

Community
Basic
0xRayAI0xRayAI

security-audit

Automate security auditing and compliance validation for software projects.

Official
Intermediate
williamzujkowskiwilliamzujkowski
17

nist

Map systems to NIST controls and generate implementation plans.

Community
Advanced
Sir-chawakornSir-chawakorn
9

remediate-web-vulnerabilities

Apply canonical hardening patterns to fix web vulnerability classes.

Community
Advanced