security-review

Automate security review by applying a comprehensive checklist to validate inputs, manage secrets, and enforce authentication. This Skill provides actionable guidance and code examples to ensure API endpoints adhere to secure development principles before deployment.

The best way to check for SQL injection and XSS is using a detailed checklist with 'Do This' and 'Never Do This' code snippets. This Skill audits web applications to identify and fix common vulnerabilities like injection attacks and cross-site scripting.

Secrets management prevents data breaches by ensuring sensitive information is never hardcoded. This Skill reviews code to verify that secrets are properly managed, addressing sensitive data exposure alongside authentication and authorization checks.

Yes, you can use this security checklist for blockchain applications. The Skill explicitly addresses blockchain security alongside standard web application and API vulnerabilities, ensuring smart contracts and related code adhere to secure development principles.

An automated code review covers secrets management, input validation, SQL injection, XSS, CSRF, authentication, authorization, rate limiting, sensitive data exposure, and dependency management. It ensures web applications and APIs mitigate common security threats.

No dependencies are required to run this security audit. The Skill operates independently using scripts and references to provide actionable guidance and comprehensive checklists for reviewing code vulnerabilities.