security-review

Review codebases against a security checklist for common vulnerabilities.

Updated Apr 13, 2026
One-click install
npx skills add https://github.com/IwatsukaYura/harness_template --skill security-review-iwatsukayura
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/IwatsukaYura/harness_template/tree/main/.claude/skills/security-review
Command: npx skills add https://github.com/IwatsukaYura/harness_template --skill security-review-iwatsukayura

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill helps teams identify and mitigate security risks in codebases by applying a comprehensive security review that covers authentication, input handling, secrets management, API design, and sensitive features.

Core Features & Use Cases

  • Security checklist coverage including secrets management, input validation, SQL injection prevention, XSS, CSRF, authentication/authorization, rate limiting, logging, and deployment hardening.
  • Step-by-step guidance for pre-deployment security and automated testing of security controls.
  • Use Case: A backend service implementing user authentication and payment processing can leverage this skill to enforce best practices and detect vulnerabilities before release.

Quick Start

Perform a security review of your project by applying the provided checklist to your codebase before deployment.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a security review on my codebase before deployment?

To perform a security review before deployment, apply a comprehensive checklist covering secrets management, input validation, SQL injection, XSS, CSRF, authentication, rate limiting, and logging to mitigate risks across web and server environments.

What is included in a comprehensive code security checklist?

A comprehensive code security checklist includes steps for secrets management, input validation, SQL injection prevention, XSS, CSRF, authentication, authorization, rate limiting, logging, and deployment hardening.

How do I prevent SQL injection and XSS vulnerabilities in my web application?

Prevent SQL injection and XSS vulnerabilities by enforcing a documented security checklist with specific steps for input validation, secure input handling, and output encoding during your code review process.

Does this security review cover authentication and payment processing features?

Yes, this security review explicitly covers authentication, authorization, input handling, secret management, API design, and payment processing to enforce best practices and detect vulnerabilities in backend services.

Can I use this security review for third-party API integrations?

Yes, you can use this security review for third-party integrations as it explicitly applies security review steps to API design and third-party integrations across web and server environments.

What's the best way to manage secrets and enforce rate limiting in my code?

The best way to manage secrets and enforce rate limiting is applying a step-by-step security checklist during code review, ensuring proper secret management and rate limiting configurations are verified before deployment.