skills.rest
Manvendra08
Manvendra08COMMUNITY
Explore all skills by this author →
GitHub

security-review

Audit application code and cloud infrastructure against security best practices.

1|Updated May 12, 2026
Search Tags:#OWASP#security#input-validation#code-review#vulnerability-prevention#secrets-management#cloud-security
One-click install
npx skills add https://github.com/Manvendra08/TradingBot --skill security-review-manvendra08
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/Manvendra08/TradingBot/tree/main/_agent/skills/security-review
Command: npx skills add https://github.com/Manvendra08/TradingBot --skill security-review-manvendra08

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill addresses the critical risk of security vulnerabilities in application code and cloud infrastructure that can lead to data breaches, unauthorized access, and system compromise, ensuring development and deployment workflows adhere to security best practices.

Core Features & Use Cases

  • Comprehensive Code Security Checklist: Covers secrets management, input validation, SQL injection prevention, authentication/authorization, XSS/CSRF protection, rate limiting, and dependency security for application development.
  • Cloud Infrastructure Security Guidance: Provides checklists for IAM configuration, network security, logging/monitoring, CI/CD pipeline hardening, and backup/disaster recovery for cloud deployments.
  • Use Case: When building a new API endpoint for a trading platform, use this Skill to verify all user inputs are validated, secrets are stored securely, and rate limiting is enabled to prevent abuse and data leaks.

Quick Start

Use the security-review skill to audit the authentication and input validation logic in the trading bot's new user registration endpoint for security gaps.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I prevent SQL injection and XSS vulnerabilities in my API endpoint code?▼

To prevent SQL injection and XSS vulnerabilities, enforce secure coding practices by validating user inputs, parameterizing database queries, and implementing output encoding. This approach stops malicious script execution and unauthorized database access.

What security checks do I need for cloud IAM configuration and deployment pipelines?▼

Security checks for cloud IAM configuration and deployment pipelines involve verifying least-privilege access controls, hardening CI/CD pipelines against unauthorized alterations, and enabling network security and monitoring to prevent unauthorized infrastructure access.

How do I validate authentication and authorization logic for security gaps before production?▼

Validate authentication and authorization logic by applying a pre-production security checklist that audits user input handling, secrets management, and access control enforcement. This ensures compliance with OWASP Top 10 requirements before release.

Does this security review cover secrets management and rate limiting for application development?▼

Yes, this security review covers secrets management and rate limiting for application development. It provides a comprehensive checklist to verify that secrets are stored securely and rate limiting is enabled to prevent API abuse and data leaks.

Related Skills

Explore More Software Engineering Skills→
riftzen-bitriftzen-bit

security-review

Identify security vulnerabilities in application code and infrastructure configurations.

Community
Advanced
vertivolatamvertivolatam
1

Security & Compliance Automation

Automate security and compliance checks for cloud-native environments using OPA, Trivy, and boto3.

Official
Advanced
rnavarychrnavarych
14

security-testing

Automate security testing with Snyk, Semgrep, Gitleaks, and OWASP ZAP in CI/CD pipelines.

Community
Advanced
jaskaranhundaljaskaranhundal
3

continuous-pentesting

Assess and prioritize attack surface testing based on exploitability and threat actor usage.

Community
Advanced