One-click install
npx skills add https://github.com/kanade0404/dotfiles --skill security-review-kanade0404
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/kanade0404/dotfiles/tree/main/.claude-plugin/skills/security-review
Command: npx skills add https://github.com/kanade0404/dotfiles --skill security-review-kanade0404

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps you spot and prevent security flaws before code reaches production, reducing the risk of breaches, data leaks, and unsafe implementations.

Core Features & Use Cases

  • Security checklist coverage: Reviews authentication, authorization, secrets handling, input validation, CSRF, XSS, rate limiting, and dependency hygiene.
  • Sensitive feature guidance: Supports work involving APIs, user accounts, file uploads, payments, and other flows that handle protected data.
  • Use case: When adding a new endpoint or changing login logic, use this Skill to verify that inputs are validated, permissions are enforced, and secrets are never exposed.

Quick Start

Ask the security-review skill to inspect this feature for vulnerabilities and tell me what needs to change before release.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review application code for security risks before release?

Review application code for security risks by checking authentication, user input, secrets handling, APIs, and payments against a security checklist. This verifies inputs are validated, permissions are enforced, and vulnerabilities are caught before code reaches production.

What security checks should I run on new API endpoints?

Security checks for new API endpoints should cover input validation, authorization, secrets management, rate limiting, and safe data exposure. Running these checks prevents breaches and data leaks in sensitive workflows before they ship.

How do I prevent XSS and CSRF vulnerabilities in web applications?

Prevent XSS and CSRF vulnerabilities by applying security review checks to your web application code. This process identifies insecure patterns in authentication and sensitive data workflows to stop unsafe implementations before release.

Does this security review cover secrets management and dependency hygiene?

Yes, this security review covers secrets management and dependency hygiene alongside authorization, input validation, and error handling. It assesses these areas across web and backend systems to reduce the risk of breaches.

How do I validate user input and enforce permissions for login logic?

Validate user input and enforce permissions for login logic by running a security review on the updated code. This verifies that inputs are properly checked, authorization is enforced, and secrets are never exposed during authentication.

Can I use a security review for file uploads and payment processing flows?

Yes, you can use a security review for file uploads, payment processing, and other flows handling protected data. It reviews these sensitive features against security patterns to ensure safe data exposure and prevent breaches.