skills.rest
luongldptit
luongldptitCOMMUNITY
Explore all skills by this author →
GitHub

security-review

Audit application code for security vulnerabilities before deployment.

Updated Mar 26, 2026
Search Tags:#code review#security#input validation#secrets management#vulnerability detection#api security#blockchain security
One-click install
npx skills add https://github.com/luongldptit/move-ticket --skill security-review-luongldptit
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/luongldptit/move-ticket/tree/main/.agent/.agents/skills/security-review
Command: npx skills add https://github.com/luongldptit/move-ticket --skill security-review-luongldptit

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Building applications with authentication, user input handling, API endpoints, payments, or sensitive data often introduces hidden security vulnerabilities that can lead to data breaches, unauthorized access, or financial loss if caught late in the development cycle.

Core Features & Use Cases

  • Comprehensive Security Checklist: Covers 10 core security domains including secrets management, input validation, SQL injection prevention, authentication/authorization, XSS/CSRF protection, rate limiting, sensitive data exposure, Solana blockchain security, and dependency security.
  • Pre-Deployment Validation: Includes a full pre-deployment checklist and automated security test examples to ensure all security controls are in place before shipping to production.
  • Use Case: When building a new user-facing API that handles payment information, this skill ensures you never hardcode secrets, validate all user input, use parameterized queries, and implement proper rate limiting to block abuse.

Quick Start

Use the security-review skill to audit the new user authentication endpoint implementation for all common security vulnerabilities before merging the code.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a security review on my API endpoints before deployment?▼

A code security review for web applications covers ten core domains including secrets management, input validation, SQL injection prevention, authentication, XSS protection, and dependency security to prevent data breaches and unauthorized access.

What's the best way to prevent secrets management issues in Supabase-backed projects?▼

Preventing secrets management issues in Supabase-backed projects requires auditing your code to ensure you never hardcode secrets and enforce proper environment-based secrets management before deployment. This validates that sensitive data exposure controls are properly implemented.

Can I use automated security validation for Solana blockchain integrations?▼

Yes, this security validation works with Solana blockchain integrations by auditing code against blockchain-specific security requirements. It ensures pre-deployment controls cover vulnerabilities in payment handling and sensitive data.

Does this code review check for SQL injection and XSS vulnerabilities in user input handling?▼

Yes, this code review checks SQL injection and XSS vulnerabilities by validating user input handling uses parameterized queries and proper output encoding. It enforces input validation and injection prevention as core pre-deployment checklist domains.

How do I implement authentication and authorization controls for a new user-facing API?▼

Implementing authentication and authorization controls requires auditing endpoints to ensure proper access controls and rate limiting block abuse. The security review validates these controls against established best practices before code merges.

Related Skills

Explore More Software Engineering Skills→
RambleRainbowRambleRainbow

security-review

Identify and mitigate security vulnerabilities in application code and cloud infrastructure.

Community
Advanced
thanhquan3010thanhquan3010

security-review

Review code and cloud infrastructure against a security checklist.

Community
Advanced
himanshu231204himanshu231204
2

laravel-security

Audit Laravel authentication, input validation, and production configuration for security vulnerabilities.

Community
Intermediate
troykellytroykelly
10

security-reviewer

Execute the security-reviewer subagent for code vulnerability detection.

Community
Basic