security-review

Review code, APIs, and data flows against a security checklist.

Updated Dec 18, 2025
One-click install
npx skills add https://github.com/JahanzaibTayyab/hackathon-2 --skill security-review-jahanzaibtayyab
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/JahanzaibTayyab/hackathon-2/tree/main/.claude/skills/security-review
Command: npx skills add https://github.com/JahanzaibTayyab/hackathon-2 --skill security-review-jahanzaibtayyab

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill codifies security best practices and provides a comprehensive security checklist to preempt vulnerabilities in code, APIs, and data handling.

Core Features & Use Cases

  • Enforces secrets management, input validation, and robust authentication/authorization
  • Prevents common web vulnerabilities (SQL injection, XSS, CSRF) and promotes secure error handling
  • Applies to authentication workflows, API endpoints, payment features, and any data-handling components

Quick Start

Run a security review on new features and API changes to apply best-practice protections before deployment.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review code for security vulnerabilities before deployment?

To review code for security vulnerabilities, apply a comprehensive security checklist covering secrets management, input validation, SQL injection, XSS, CSRF, authentication, and rate limiting to identify and mitigate risks in APIs and data flows.

What is secure-by-default code review for API endpoints?

Secure-by-default code review for API endpoints is a risk assessment process that enforces input validation, robust authentication, authorization, rate limiting, and secure error handling to preempt vulnerabilities in web applications and services.

Can I use a security checklist for authentication and payment features?

Yes, you can use a security checklist for authentication and payment features to enforce secrets management, input validation, and secure error handling across data-handling components in web applications.

What's the best way to prevent SQL injection and XSS in my code?

The best way to prevent SQL injection and XSS in your code is to enforce strict input validation and apply a comprehensive security-review checklist to preempt vulnerabilities in data handling and API endpoints.

Does this security review cover secrets management and rate limiting?

Yes, this security review covers secrets management and rate limiting as part of a comprehensive checklist to mitigate risks in authentication workflows, API endpoints, and data-handling components.