security-review

Review code, APIs, and data flows against a security checklist.

Updated Dec 18, 2025

Search Tags:#checklist #security #authentication #input-validation #risk-assessment #secrets-management #secure-coding

Ready to run

npx skills add https://github.com/JahanzaibTayyab/hackathon-2 --skill security-review-jahanzaibtayyab

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/JahanzaibTayyab/hackathon-2/tree/main/.claude/skills/security-review
Command: npx skills add https://github.com/JahanzaibTayyab/hackathon-2 --skill security-review-jahanzaibtayyab

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill codifies security best practices and provides a comprehensive security checklist to preempt vulnerabilities in code, APIs, and data handling.

Core Features & Use Cases

Enforces secrets management, input validation, and robust authentication/authorization
Prevents common web vulnerabilities (SQL injection, XSS, CSRF) and promotes secure error handling
Applies to authentication workflows, API endpoints, payment features, and any data-handling components

Quick Start

Run a security review on new features and API changes to apply best-practice protections before deployment.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I review code for security vulnerabilities before deployment?▼

To review code for security vulnerabilities, apply a comprehensive security checklist covering secrets management, input validation, SQL injection, XSS, CSRF, authentication, and rate limiting to identify and mitigate risks in APIs and data flows.

What is secure-by-default code review for API endpoints?▼

Secure-by-default code review for API endpoints is a risk assessment process that enforces input validation, robust authentication, authorization, rate limiting, and secure error handling to preempt vulnerabilities in web applications and services.

Can I use a security checklist for authentication and payment features?▼

Yes, you can use a security checklist for authentication and payment features to enforce secrets management, input validation, and secure error handling across data-handling components in web applications.

What's the best way to prevent SQL injection and XSS in my code?▼

The best way to prevent SQL injection and XSS in your code is to enforce strict input validation and apply a comprehensive security-review checklist to preempt vulnerabilities in data handling and API endpoints.

Does this security review cover secrets management and rate limiting?▼

Yes, this security review covers secrets management and rate limiting as part of a comprehensive checklist to mitigate risks in authentication workflows, API endpoints, and data-handling components.

johngutierrez31

threat-modeling-expert

Apply STRIDE threat analysis to system architecture diagrams.

Community

Advanced

JimmyTranDev

security-npm-vulnerabilities

Triage npm audit vulnerabilities and plan safe dependency upgrades.

Community

Advanced

JFrangel

security-guard

Detects and remediates security vulnerabilities in code, infrastructure, and architecture using OWASP and DevSecOps standards for pre-production environments.

Community

Advanced