security-review

Automate security review of code with a comprehensive vulnerability checklist.

Updated Jan 27, 2026

Search Tags:#code review #best practices #security #authentication #vulnerability #data protection

Ready to run

npx skills add https://github.com/LeonMelamud/inspector-agents --skill security-review-leonmelamud

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/LeonMelamud/inspector-agents/tree/main/.github/skills/security-review
Command: npx skills add https://github.com/LeonMelamud/inspector-agents --skill security-review-leonmelamud

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps developers identify and fix security vulnerabilities in their code, preventing data breaches and protecting sensitive information.

Core Features & Use Cases

Comprehensive Checklist: Provides a detailed checklist covering secrets management, input validation, SQL injection, XSS, CSRF, and more.
Code Examples: Offers clear "Do This" and "Never Do This" code snippets for best practices.
Use Case: Before deploying a new API endpoint that handles user data, run this Skill to ensure all security best practices are followed, from input validation to authentication.

Quick Start

Use the security-review skill to audit the code for potential vulnerabilities.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I automate security review for API endpoints handling user data?▼

Automate security review by applying a comprehensive checklist to validate inputs, manage secrets, and enforce authentication. This Skill provides actionable guidance and code examples to ensure API endpoints adhere to secure development principles before deployment.

What is the best way to check my code for SQL injection and XSS vulnerabilities?▼

The best way to check for SQL injection and XSS is using a detailed checklist with 'Do This' and 'Never Do This' code snippets. This Skill audits web applications to identify and fix common vulnerabilities like injection attacks and cross-site scripting.

How does secrets management factor into secure code development?▼

Secrets management prevents data breaches by ensuring sensitive information is never hardcoded. This Skill reviews code to verify that secrets are properly managed, addressing sensitive data exposure alongside authentication and authorization checks.

Can I use this security checklist for blockchain application code?▼

Yes, you can use this security checklist for blockchain applications. The Skill explicitly addresses blockchain security alongside standard web application and API vulnerabilities, ensuring smart contracts and related code adhere to secure development principles.

What vulnerabilities does an automated code review cover for web applications?▼

An automated code review covers secrets management, input validation, SQL injection, XSS, CSRF, authentication, authorization, rate limiting, sensitive data exposure, and dependency management. It ensures web applications and APIs mitigate common security threats.

Do I need any dependencies to run this security audit?▼

No dependencies are required to run this security audit. The Skill operates independently using scripts and references to provide actionable guidance and comprehensive checklists for reviewing code vulnerabilities.