security-review

Review code for authentication, input validation, and secrets management vulnerabilities.

Updated May 24, 2023
One-click install
npx skills add https://github.com/Kimjiman/basic-arch --skill security-review-kimjiman
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/Kimjiman/basic-arch/tree/main/.claude/skills/security-review
Command: npx skills add https://github.com/Kimjiman/basic-arch --skill security-review-kimjiman

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill proactively identifies and mitigates security vulnerabilities in your code, ensuring robust protection against common and advanced threats.

Core Features & Use Cases

  • Comprehensive Security Audits: Scans code for common vulnerabilities like SQL injection, XSS, and insecure secrets management.
  • Best Practice Enforcement: Provides actionable guidance and code examples for secure coding patterns across various domains (authentication, input validation, cloud infrastructure, etc.).
  • Use Case: Before deploying a new user authentication system, activate this Skill to receive a detailed checklist and code snippets to ensure all security best practices are followed, preventing potential breaches.

Quick Start

Use the security-review skill to audit the authentication and authorization logic in the new user signup endpoint.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review my code for security vulnerabilities before deployment?

Code security vulnerabilities are reviewed by scanning for SQL injection, XSS, and insecure secrets management. The process provides actionable checklists and secure coding patterns to ensure robust protection against common and advanced threats before deployment.

What is the best way to secure authentication and API endpoints in my application?

Securing authentication and API endpoints is achieved by conducting thorough security reviews focused on authorization logic and sensitive data handling. This approach provides actionable guidance and code examples to enforce best practices across your application.

Does this security review cover cloud infrastructure and CI/CD pipeline security?

Security review covers cloud infrastructure and CI/CD pipeline security by providing specific checklists and patterns. It ensures adherence to OWASP Top 10 and platform-specific security guidelines across various infrastructure domains.

How do I check if my code adheres to OWASP Top 10 and platform-specific security guidelines?

Checking OWASP Top 10 adherence is performed during the comprehensive security audit. The review ensures your authentication, input validation, and sensitive data handling align with established platform-specific security guidelines.

Can I get code examples for secure input validation and secrets management?

Code examples for secure input validation and secrets management are provided through best practice enforcement. The review delivers actionable guidance and code snippets demonstrating secure coding patterns across various domains.

What are the limitations of automated code security reviews for blockchain applications?

Code security reviews for blockchain applications provide checklists and patterns for vulnerability mitigation, but require proactive identification of advanced threats. The review focuses on ensuring robust protection rather than guaranteeing complete vulnerability elimination.