security-review

Identify and mitigate security vulnerabilities in code and configurations.

115|6|Updated Dec 28, 2025

Search Tags:#security #authentication #input-validation #threat-modeling #code-review #secrets-management #security-review

Ready to run

npx skills add https://github.com/jewbetcha/opentrace --skill security-review-jewbetcha

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/jewbetcha/opentrace/tree/main/.agents/skills/security-review
Command: npx skills add https://github.com/jewbetcha/opentrace --skill security-review-jewbetcha

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps identify vulnerabilities and enforce security best practices across authentication, user input handling, secret management, API design, and payment features, reducing risk from day one.

Core Features & Use Cases

Security hygiene: Secrets management, input validation, and secure coding guidelines.
Threat prevention: Authentication/authorization checks, CSRF/XSS mitigation, and secure session handling.
Code reviews & pre-deployment: Structured security checklists and threat modeling during development and reviews.

Quick Start

Provide the feature's code or architecture and ask the AI to generate a prioritized remediation checklist and concrete fixes.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I review my code for security vulnerabilities before deployment?▼

To review code for security vulnerabilities, provide your feature's code or architecture to generate a prioritized remediation checklist. This covers secrets management, input validation, SQL injection prevention, and CSRF/XSS protections to secure software before deployment.

What security checklist should I follow for web and mobile app authentication?▼

A comprehensive security checklist for authentication includes enforcing authentication/authorization checks, secure session handling, and rate limiting. It mitigates threats by validating user inputs and managing secrets across web and mobile app platforms.

Can I use this security review process for API design and payment features?▼

Yes, you can use this security review process for API design and payment features. It identifies vulnerabilities and enforces best practices across authentication, user input handling, secret management, and payment configurations during development.

How does threat modeling integrate into my development code reviews?▼

Threat modeling integrates into development code reviews by applying a structured security checklist to your architecture. This enforces secure coding guidelines, dependency auditing, and secure logging while identifying and mitigating vulnerabilities during reviews.

What is the best way to prevent SQL injection and XSS in my application?▼

The best way to prevent SQL injection and XSS is to enforce strict input validation and apply CSRF/XSS mitigation protections. A structured security review identifies these specific vulnerabilities and generates concrete fixes for your code.