security-review

Automate security reviews of codebases for vulnerabilities and misconfigurations.

Updated Apr 3, 2026
One-click install
npx skills add https://github.com/matlockx/track-work --skill security-review-matlockx
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/matlockx/track-work/tree/main/.agent/skills/security-review
Command: npx skills add https://github.com/matlockx/track-work --skill security-review-matlockx

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill provides a structured, repeatable security review for software projects, helping teams identify and remediate vulnerabilities before deployment.

Core Features & Use Cases

  • Comprehensive checklists for secrets management, input validation, authentication, authorization, and secure data handling.
  • Guided best practices including SQL injection prevention, XSS protection, CSRF defense, rate limiting, and dependency security.
  • Use Case: Integrate security reviews into CI/CD to generate actionable remediation notes and ensure production-grade security coverage.

Quick Start

Run the security-review skill against your codebase to generate a comprehensive safety report and remediation recommendations.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate a security review for my codebase to check for vulnerabilities?

Automate a security review by running a structured checklist against your codebase to identify vulnerabilities in authentication, authorization, and input handling, generating actionable remediation notes.

What security checks should I include in a CI/CD pipeline to prevent deployment vulnerabilities?

Security checks for CI/CD pipelines should include secrets management, input validation, SQL injection prevention, XSS protection, CSRF defense, rate limiting, and dependency security to ensure production-grade coverage.

How does automated secrets management and input validation work in code reviews?

Automated secrets management and input validation work by applying a rigorous checklist during code reviews to detect misconfigurations and bad inputs, providing structured remediation patterns before deployment.

Can I use this security review approach for web apps, APIs, and backend services?

Yes, you can use this security review approach for web apps, APIs, and services by applying its comprehensive checklist to evaluate data protection, authentication, authorization, and deployment security across your stack.

What is the best way to integrate authentication and authorization checks into code reviews?

The best way to integrate authentication and authorization checks is using a structured, repeatable security review skill that evaluates access controls and generates actionable remediation recommendations during code reviews.

What are the limitations of using a checklist-based security review for production code?

A checklist-based security review requires integration into your CI/CD pipeline and manual code reviews to be effective, providing structured remediation patterns rather than automatically patching the identified vulnerabilities.