security-review

Name: security-review
Availability: InStock
Author: Jialong

Audit web application code against security checklists for vulnerabilities.

Updated Jan 9, 2026

Search Tags:#authorization #OWASP #authentication #vulnerability #input-validation #secrets-management #security-review

Ready to run

npx skills add https://github.com/Jialong6/Cursor-OEM-backpack-factory --skill security-review-jialong6

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/Jialong6/Cursor-OEM-backpack-factory/tree/main/skills/security-review
Command: npx skills add https://github.com/Jialong6/Cursor-OEM-backpack-factory --skill security-review-jialong6

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps developers identify and mitigate security vulnerabilities in software projects.

Core Features & Use Cases

Secrets management: Guidance to securely handle credentials and avoid hard-coding secrets.
Input validation & sanitization: Enforces schema validation and safe rendering of user input.
Authentication & Authorization: Best practices for tokens, cookies, and RBAC to control access.
CSRF & XSS protection: Techniques to prevent cross-site scripting and request forgery.
Security testing & auditing: Checklists and testing strategies for secure releases.
Use Case: Imagine auditing a new API; apply the checklist to verify endpoints meet security standards.

Quick Start

Follow the Security Review Skill to audit your codebase against the checklist and implement recommended mitigations.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I perform a security review on my web application codebase?▼

To perform a security review, audit your codebase against a comprehensive checklist covering authentication, input validation, secret management, API endpoints, and payment implementations to identify and mitigate vulnerabilities.

What are the best practices for preventing XSS and CSRF vulnerabilities in web applications?▼

Preventing XSS and CSRF vulnerabilities requires enforcing schema validation, safe rendering of user input, and applying specific techniques to stop cross-site scripting and request forgery during development.

How should I handle secrets management to avoid hard-coding credentials in my project?▼

Secrets management involves following specific guidance to securely handle credentials and avoid hard-coding secrets, ensuring sensitive data is protected through secure-by-default development practices.

Does this security review checklist cover authentication and RBAC authorization?▼

Yes, the security review checklist covers authentication and authorization, providing best practices for tokens, cookies, and role-based access control (RBAC) to properly control user access.

How do I validate and sanitize user input to secure my API endpoints?▼

Input validation and sanitization secure API endpoints by enforcing schema validation and safe rendering of user input, mitigating risks before they reach core application logic.

What secure logging and rate limiting standards should my API meet for a secure release?▼

APIs should meet security standards by codifying requirements for rate limiting and secure logging, ensuring endpoints are protected against abuse and sensitive data is not exposed in logs.