security-review

Review code for security vulnerabilities across authentication, validation, and dependencies.

3|Updated Jan 28, 2026
One-click install
npx skills add https://github.com/JohnMarkCapones/Aralify --skill security-review-johnmarkcapones
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/JohnMarkCapones/Aralify/tree/main/.cursor/skills/security-review
Command: npx skills add https://github.com/JohnMarkCapones/Aralify --skill security-review-johnmarkcapones

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill proactively identifies and mitigates security vulnerabilities in code, ensuring robust protection against common and advanced threats.

Core Features & Use Cases

  • Comprehensive Security Checklist: Covers secrets management, input validation, SQL injection prevention, authentication/authorization, XSS, CSRF, rate limiting, sensitive data exposure, and dependency security.
  • Best Practice Examples: Provides clear "Do This" vs. "Never Do This" code examples for various security scenarios.
  • Use Case: Before deploying a new API endpoint that handles user data, activate this skill to ensure all security best practices, from input validation to proper authentication, are implemented.

Quick Start

Run a security review on the current codebase to identify potential vulnerabilities.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a security review on my code before deployment?

A security review proactively identifies and mitigates vulnerabilities across domains like secrets management, input validation, authentication, and dependency security before deployment. It provides detailed checklists and best practices to ensure robust protection against common and advanced threats.

What is the best way to prevent SQL injection and XSS in API endpoints?

The best way to prevent SQL injection and XSS is through comprehensive input validation and following explicit best practice examples. A security review provides clear 'Do This' versus 'Never Do This' code examples to ensure proper data protection and secure development.

Does this code review check authentication and rate limiting vulnerabilities?

Yes, this code review checks authentication and rate limiting vulnerabilities along with secrets management, SQL injection, CSRF, sensitive data exposure, and dependency security. It offers a comprehensive checklist covering all these critical domains to secure your code and protect users.

Can I use this security checklist for new API endpoints handling user data?

Yes, you can use this security checklist for new API endpoints handling user data to ensure all security best practices are implemented. It covers the necessary input validation, proper authentication, and data exposure protections required for robust endpoint security.

Why does my code need dependency security and secrets management checks?

Your code needs dependency security and secrets management checks to proactively identify and mitigate vulnerabilities that could expose sensitive data. Reviewing these domains ensures robust protection against both common exploits and advanced supply chain threats during development.

What security vulnerabilities should I look for in a codebase review?

In a codebase review, look for vulnerabilities across secrets management, input validation, SQL injection, authentication, authorization, XSS, CSRF, rate limiting, sensitive data exposure, and dependency security. A comprehensive security review identifies these threats and provides mitigation best practices.