skills.rest
jakezp
jakezpCOMMUNITY
Explore all skills by this author →
GitHub

security-review

Enforce security best practices across codebases and CI/CD pipelines.

17|1|Updated Jan 30, 2026
Search Tags:#security#authentication#xss#input-validation#csrf#secrets-management#secure-coding
One-click install
npx skills add https://github.com/jakezp/everything-opencode --skill security-review-jakezp
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/jakezp/everything-opencode/tree/main/skills/security-review
Command: npx skills add https://github.com/jakezp/everything-opencode --skill security-review-jakezp

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill helps teams enforce security best practices across authentication, input handling, secrets management, API security, and deployment pipelines, reducing vulnerabilities and security debt.

Core Features & Use Cases

  • Security checklist covering secrets management, input validation, SQL injection prevention, authentication & authorization, XSS prevention, CSRF, rate limiting, data leakage protection, and dependency security.
  • Automated security tests and pre-deployment hardening guidelines to integrate into CI/CD workflows.
  • Use Case: Ensure new features implement security checks from design to deployment with audit trails.

Quick Start

Review the security checklist and apply the patterns in your codebase during development and code reviews.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I enforce secure coding patterns for authentication and input validation?▼

Automated security tests and pre-deployment hardening guidelines integrate directly into CI/CD pipelines. This ensures features implement security checks from design to deployment with audit trails.

What is the best way to prevent XSS and CSRF vulnerabilities during API development?▼

Apply targeted security best practices during API development to mitigate XSS and CSRF risks. The skill provides patterns to prevent data leakage and secure endpoints against common web vulnerabilities.

How do I integrate automated security checks into CI/CD pipelines?▼

Integrate automated security checks by adding pre-deployment hardening guidelines and tests into your CI/CD workflows. This enforces deployment-time safeguards and satisfies threat modeling requirements.

Does this security review approach cover secrets management and SQL injection prevention?▼

Yes, this security review approach explicitly covers secrets management and SQL injection prevention. It enforces comprehensive best practices across these areas to detect and mitigate codebase risks.

When do I need threat modeling and deployment-time safeguards for my codebase?▼

You need threat modeling and deployment-time safeguards when designing new features or hardening CI/CD pipelines. This ensures security checks are implemented from initial design through final deployment.

Related Skills

Explore More Software Engineering Skills→
cdalsoniiicdalsoniii

Threat Model

Apply STRIDE threat modeling to system components and data flows.

Community
Advanced
Advance-Technologies-FoundationAdvance-Technologies-Foundation
55

security-reviewer

Identify security vulnerabilities in source code changes using Context7 and vulnerability databases.

Official
Intermediate
williabywilliaby

security

Automates security validation, vulnerability scanning, and compliance checks for development environments.

Community
Intermediate
amotion-aiamotion-ai

triage

Scan BotAssist codebase for security vulnerabilities, logic errors, and test coverage gaps.

Official
Intermediate