security-review

Apply a security review checklist to identify codebase vulnerabilities.

Updated Jan 24, 2026
One-click install
npx skills add https://github.com/koumatsumoto/.claude --skill security-review-koumatsumoto
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/koumatsumoto/.claude/tree/main/skills/security-review
Command: npx skills add https://github.com/koumatsumoto/.claude --skill security-review-koumatsumoto

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill helps ensure that code adheres to security best practices and identifies potential vulnerabilities to reduce risk during authentication, input handling, secrets management, API design, and payment-related features.

Core Features & Use Cases

  • Evidence-based security checklist covering secret management, input validation, authentication/authorization, and secure API design.
  • Automated security testing and deployment-time checks to catch misconfigurations.
  • Real-world scenarios include implementing secure login, protecting user data, and auditing dependencies for vulnerabilities.

Quick Start

Run a security review against your project using the provided checklist to identify and remediate vulnerabilities.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a security review on my codebase to identify vulnerabilities?

Run a security review by applying a comprehensive checklist to your codebase, targeting authentication, input validation, secret management, and API security to identify and remediate vulnerabilities.

What security checks are needed for robust session handling and API security?

Robust session handling and API security require parameterized queries, input validation, CSRF protections, rate limiting, and secure logging to enforce concrete security requirements across your application.

How does environment-based secret management work during a security audit?

Environment-based secret management ensures sensitive data is handled via environment variables rather than hardcoded values, reducing risk during a security audit of your authentication and payment features.

Can I use this security review checklist for both frontend and backend layers?

Yes, the security review checklist covers both frontend and backend layers, enforcing concrete requirements like dependency vulnerability checks and secure deployment practices across the entire codebase.

When do I need to audit dependencies for vulnerabilities and misconfigurations?

You need to audit dependencies for vulnerabilities and misconfigurations during deployment-time checks to catch security weaknesses and ensure code adheres to security best practices.

What is the best way to implement secure login and protect user data?

Implement secure login and protect user data by enforcing evidence-based security checklist items, including robust session handling, rate limiting, and secure authentication mechanisms across your application.