security-review

Identify security and privacy weaknesses in code handling sensitive data.

Updated Feb 11, 2026
One-click install
npx skills add https://github.com/kabaka/cpap-analyzer --skill security-review-kabaka
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/kabaka/cpap-analyzer/tree/main/.github/skills/security-review
Command: npx skills add https://github.com/kabaka/cpap-analyzer --skill security-review-kabaka

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps development and security teams identify security and privacy weaknesses in code that handles sensitive data or integrates with external systems, reducing risk and compliance gaps.

Core Features & Use Cases

  • Security review checklist for input handling, storage, external API usage, and logging.
  • Vulnerability guidance including common weaknesses and remediation practices to apply during code reviews.
  • Use Case: When reviewing a new feature that processes user data, apply the security-review process to ensure safe handling and storage.

Quick Start

Apply the security-review checklist to your codebase to identify vulnerabilities and privacy gaps.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit code for security and privacy compliance during a pull request?

To audit code for security and privacy compliance, apply a checklist covering file input handling, storage security, external API usage, dependencies, logging, and data exposure risks to identify weaknesses during pull requests.

What security vulnerabilities should I look for when reviewing code that handles sensitive data?

Security vulnerabilities to look for include weaknesses in file input handling, storage security, external API usage, dependency risks, improper logging, and data exposure across web, mobile, and backend services processing sensitive information.

Can I use a security review checklist for architecture evaluations across mobile and backend services?

Yes, you can use a security review checklist for architecture evaluations across mobile, web, and backend services to identify privacy weaknesses and compliance gaps in code integrating with external systems.

What is the best way to identify privacy weaknesses in external API integrations?

The best way to identify privacy weaknesses in external API integrations is to enforce a security review checklist that evaluates external integrations, data exposure risks, and storage security for code handling sensitive data.

When do I need to perform a security assessment on my codebase?

You need to perform a security assessment on your codebase when reviewing new features that process user data, during code reviews, or when evaluating architecture to ensure safe handling and reduce compliance gaps.