security-review

Inspect code changes for security vulnerabilities and best practices.

3|Updated Nov 24, 2025
One-click install
npx skills add https://github.com/jenningsloy318/claude-skill-artifacts --skill security-review-jenningsloy318
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/jenningsloy318/claude-skill-artifacts/tree/main/super-dev-plugin/skills/security-review
Command: npx skills add https://github.com/jenningsloy318/claude-skill-artifacts --skill security-review-jenningsloy318

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill ensures every code change undergoes a security review by providing a comprehensive, repeatable checklist that catches common vulnerabilities and promotes secure coding practices.

Core Features & Use Cases

  • Secrets management: enforce environment-based secrets and avoid hardcoding credentials.
  • Input validation & sanitization: prevent injection and ensure safe data handling.
  • Authentication & authorization checks: confirm proper access controls and role-based permissions.
  • Pre-deployment security checklist: validate dependencies, logging hygiene, CSRF/XSS protections, and secure configuration before release.
  • Use Case: when adding a new API endpoint, trigger a security review that assesses potential risks and produces a remediation plan.

Quick Start

Run security-review on the new feature's code to perform a comprehensive security assessment.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate security reviews for code changes and pull requests?

Automating security reviews involves inspecting code changes against a comprehensive checklist to catch vulnerabilities and enforce best practices across authentication, secrets management, and input validation in your pull requests.

What security checks should I run before deploying a new API endpoint?

Run a pre-deployment security checklist that validates dependency hygiene, logging, CSRF and XSS protections, and secure configurations to assess potential risks and produce a remediation plan before releasing the new API endpoint.

How do I prevent hardcoded credentials and enforce environment-based secrets management?

Enforce environment-based secrets management during your security review to ensure credentials are loaded from secure configurations, preventing sensitive data from being hardcoded directly into the source code.

Does this automated security review cover third-party integrations and dependency hygiene?

Yes, the automated security review explicitly covers third-party integrations and enforces dependency hygiene by validating external library usage and configurations against secure coding practices before deployment.

What is the best way to check for SQL injection and XSS vulnerabilities in my codebase?

Apply a comprehensive security review that inspects input validation and sanitization mechanisms to prevent SQL injection and XSS vulnerabilities, ensuring safe data handling and enforcing protections across your codebase.

Can I use this security review to validate role-based authorization and access controls?

Yes, the security review confirms proper access controls and role-based permissions by systematically checking authentication and authorization mechanisms across your application features and API endpoints.