security-review

Identify security vulnerabilities in Laravel/Nuxt code changes during reviews.

3|Updated Feb 9, 2026
One-click install
npx skills add https://github.com/marcus-friction/agents --skill security-review-marcus-friction
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/marcus-friction/agents/tree/main/.agent/skills/security-review
Command: npx skills add https://github.com/marcus-friction/agents --skill security-review-marcus-friction

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This security-audit checklist guides reviewers to identify and mitigate vulnerabilities in code changes, reducing risk before deployment.

Core Features & Use Cases

  • Comprehensive items spanning input validation, authentication/authorization, data exposure, SQL safety, XSS, secrets, CSRF, and dependency hygiene.
  • Use Case: during a code review or PR, apply the checklist to detect insecure patterns and enforce mitigations across backend and frontend code.

Quick Start

Run the security-review checklist during the code review pass to evaluate new changes against established security controls.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check code changes for security vulnerabilities during a pull request?

To check code changes for security vulnerabilities during a pull request, apply a structured checklist covering input validation, authentication, data exposure, SQL safety, XSS, secrets, CSRF, and dependency hygiene to detect insecure patterns before deployment.

What is the best way to review Laravel and Nuxt code for XSS and SQL injection risks?

The best way to review Laravel and Nuxt code for XSS and SQL injection risks is to enforce a security-audit checklist that evaluates new frontend and backend changes against established controls for SQL safety and cross-site scripting.

How do I mitigate data exposure and CSRF risks in a code review?

To mitigate data exposure and CSRF risks in a code review, apply a checklist that identifies insecure patterns in authentication and data handling, enforcing mitigations across the codebase to reduce risk before deployment.

Does this security review checklist cover dependency hygiene and secrets management?

Yes, this security review checklist covers dependency hygiene and secrets management, guiding reviewers to identify and mitigate vulnerabilities related to exposed secrets and insecure package dependencies in code changes.

When do I need to run a security audit checklist on my codebase?

You need to run a security audit checklist on your codebase during code reviews and merge requests to evaluate new changes against established security controls, reducing risk before the code is deployed.