security-review

Audit web application code for security vulnerabilities and OWASP compliance.

1|Updated Apr 11, 2026

Search Tags:#security #authentication #vulnerability #audit #compliance #encryption

Ready to run

npx skills add https://github.com/its-Basudeba/Care-HMS --skill security-review-its-basudeba

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/its-Basudeba/Care-HMS/tree/main/.agent/.agents/skills/security-review
Command: npx skills add https://github.com/its-Basudeba/Care-HMS --skill security-review-its-basudeba

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill addresses the critical need for proactive vulnerability detection, ensuring that sensitive applications remain protected against common exploits like SQL injection, XSS, and unauthorized access.

Core Features & Use Cases

Comprehensive Security Auditing: Validates code against industry-standard checklists including secrets management, input sanitization, and authentication protocols.
Vulnerability Prevention: Provides actionable patterns for secure database queries, cookie handling, and rate limiting.
Use Case: Before deploying a new API endpoint, use this skill to verify that all user inputs are validated, secrets are properly managed via environment variables, and CSRF protections are correctly implemented.

Quick Start

Use the security-review skill to audit the current codebase for potential vulnerabilities and provide a remediation plan.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I audit my web application for security vulnerabilities before deployment?▼

To audit for security vulnerabilities, enforce strict coding standards and defensive programming patterns across authentication, data handling, and infrastructure layers. This verifies inputs, manages secrets via environment variables, and ensures CSRF protections are correctly implemented before deployment.

What is the best way to ensure my API endpoints comply with OWASP best practices?▼

Ensuring OWASP compliance involves validating code against automated checklists for secrets management, input sanitization, and authentication protocols. This provides actionable patterns for secure database queries, cookie handling, and rate limiting to prevent unauthorized access.

Can I use automated security reviews to prevent SQL injection and XSS attacks?▼

Automated security reviews proactively identify and mitigate common exploits like SQL injection and XSS. By enforcing defensive programming patterns and strict coding standards, it keeps sensitive applications protected against unauthorized data access.

Does this automated security audit check authentication and infrastructure configuration layers?▼

Yes, automated security audits operate across authentication, data handling, and infrastructure configuration layers. It validates authentication protocols and infrastructure settings to enforce strict coding standards and prevent common exploits.

How do I implement secure database queries and proper secrets management?▼

Implement secure database queries and secrets management by validating code against industry-standard checklists. This verifies that user inputs are validated, secrets are properly managed via environment variables, and secure cookie handling patterns are applied.