security-review

Review web development code for common security vulnerabilities.

Updated Jul 27, 2026
One-click install
npx skills add https://github.com/kouiso/designdiff --skill security-review-kouiso
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/kouiso/designdiff/tree/main/.claude/skills/security-review
Command: npx skills add https://github.com/kouiso/designdiff --skill security-review-kouiso

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps developers identify and mitigate common security vulnerabilities in their code, ensuring robust protection against threats.

Core Features & Use Cases

  • Comprehensive Security Checklist: Provides detailed checks for secrets management, input validation, SQL injection, authentication, XSS, CSRF, rate limiting, sensitive data exposure, blockchain security, and dependency management.
  • Code Patterns & Examples: Offers "Do This" and "Never Do This" code examples in TypeScript and SQL to illustrate secure practices.
  • Verification Steps: Includes actionable verification steps for each security category.
  • Use Case: Before deploying a new feature that handles user authentication and payment processing, run this Skill to ensure all security best practices are followed, preventing potential breaches.

Quick Start

Use the security-review skill to check the attached code file for common security vulnerabilities.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check my code for common security vulnerabilities before deployment?

To check code for security vulnerabilities, use a comprehensive review checklist covering secrets management, input validation, SQL injection, authentication, XSS, and CSRF. This provides specific Do and Never Do code examples in TypeScript and SQL alongside actionable verification steps.

What are the best practices for web application authentication and input validation?

Best practices for web application authentication and input validation involve enforcing strict data sanitization and robust session handling. This checklist offers secure code patterns to prevent unauthorized access and mitigate common vulnerabilities like SQL injection and cross-site scripting.

How can I prevent SQL injection and XSS attacks in my TypeScript application?

Preventing SQL injection and XSS attacks in TypeScript requires parameterized queries and proper output encoding. This review provides direct Do This and Never Do This code examples to identify weak points and implement secure coding patterns against these threats.

Does this security review cover secrets management and sensitive data exposure?

Yes, this security review thoroughly covers secrets management and sensitive data exposure. It includes specific verification steps to ensure hardcoded credentials are removed and sensitive user data is properly protected during transmission and storage.

What steps should I follow to secure a new feature handling user authentication and payments?

To secure a new feature handling authentication and payments, run a comprehensive security review addressing rate limiting, dependency management, and data exposure. This yields actionable verification steps to ensure all security best practices are followed before launch.