security-review

Review code, configurations, and APIs against a security checklist.

Updated Jan 22, 2026
One-click install
npx skills add https://github.com/linnefromice/claude-code-workspace --skill security-review-linnefromice
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/linnefromice/claude-code-workspace/tree/main/template-.claude/skills/security-review
Command: npx skills add https://github.com/linnefromice/claude-code-workspace --skill security-review-linnefromice

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill provides a structured, repeatable approach to identifying and mitigating security risks in code, configurations, and APIs to prevent vulnerabilities in production.

Core Features & Use Cases

  • Security checklist coverage: secrets management, input validation, authentication, authorization, logging, and secure configuration.
  • Pattern-based guidance: reusable security patterns and remediation steps for common scenarios like API security, CSRF protection, and secure deployment.
  • Use Case: when adding a new feature or API endpoint, generate a security review checklist and implementation notes for the team.

Quick Start

Run a security review on a new API or feature by prompting the AI to generate a compliance checklist and actionable fixes for authentication, secret handling, and input validation.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a security review on a new API endpoint?

Perform a security review on a new API endpoint by generating a compliance checklist and actionable fixes for authentication, secret handling, and input validation. This ensures secure configuration and access control before deployment.

What is included in a secure code review checklist?

A secure code review checklist includes coverage for secrets management, input validation, authentication, authorization, logging, and secure configuration. It provides reusable patterns and remediation steps for common scenarios like API security and CSRF protection.

When do I need to run a security review on my code and configurations?

Run a security review during authentication setup, secret management, API endpoint creation, and deployment. It enforces security best practices and mitigates vulnerabilities in production by applying structured, pattern-based guidance.

Can I use this security review approach for any deployment environment?

Yes, you can apply this security review approach to any deployment environment. It enforces a security checklist for access control, logging, and error handling, ensuring best practices are followed across diverse configurations and APIs.

What is the best way to check for secrets management and input validation issues?

The best way to check for secrets management and input validation issues is using a structured, repeatable approach that applies a security checklist. This identifies risks in code and configurations and provides remediation steps for common vulnerabilities.

Why does my API deployment still have security vulnerabilities after a basic check?

API deployments often retain vulnerabilities if basic checks miss CSRF protection, secure configuration, or access control flaws. A comprehensive security review applies pattern-based guidance and a full checklist to identify and mitigate these risks effectively.