skills.rest
mbwsims
mbwsimsCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

security-review

Trace untrusted data flows to identify exploitable security weaknesses in code.

71|7|Updated Apr 4, 2026
Search Tags:#authorization#vulnerability#input-validation#threat-modeling#code-review#security-review#secure-coding
One-click install
npx skills add https://github.com/mbwsims/claude-universe --skill security-review-mbwsims
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/mbwsims/claude-universe/tree/main/skills/security-review
Command: npx skills add https://github.com/mbwsims/claude-universe --skill security-review-mbwsims

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This skill helps teams perform a security-focused code review to identify exploitable weaknesses in code and configurations, reducing risk before deploy.

Core Features & Use Cases

  • Baseline security review: perform structured checks on input handling, authentication, authorization, data flow, and error handling.
  • Data-flow tracing: track untrusted input from source to output to uncover insecure processing paths.
  • Threat modeling guidance: identify potential attack surfaces and recommended mitigations.
  • Actionable reporting: produce clear findings with concrete fixes and secure patterns for developers and reviewers.

Quick Start

Provide the file path or directory you want reviewed for a security-focused assessment.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a security-focused code review to identify exploitable weaknesses?▼

A security-focused code review identifies exploitable weaknesses in code and configurations by performing structured checks on input handling, authorization, and data flow across backend, frontend, or infrastructure files.

What is data-flow tracing and how does it find insecure processing paths?▼

Data-flow tracing tracks untrusted input from source to output to uncover insecure processing paths. It scrutinizes how data moves through backend, frontend, or infrastructure systems to identify exploitable weaknesses.

Can I review a whole repository for authorization and input validation flaws?▼

Yes, you can review a whole repository for authorization and input validation flaws. The assessment applies to individual files or entire repositories across backend, frontend, or infrastructure configurations.

How do I get actionable remediation guidance for insecure coding patterns?▼

Actionable remediation guidance provides clear findings with concrete fixes and secure coding patterns. It helps developers and reviewers fix exploitable weaknesses identified during structured security checks.

When do I need threat modeling guidance for my code?▼

You need threat modeling guidance to identify potential attack surfaces and recommended mitigations before deploy. It helps teams reduce risk by applying attacker-aware data-flow tracing to untrusted input handling.

Related Skills

Explore More Software Engineering Skills→
rainoftimerainoftime
17

taint-analysis

Track untrusted data flow from sources to sinks in Python code.

Community
Intermediate
wonderslifewonderslife
13

expert-security

Identify and remediate code vulnerabilities in web and backend systems.

Community
Advanced
nikhillinitnikhillinit

security-scanner

Detect security vulnerabilities, secrets, and misconfigurations in codebases.

Community
Advanced
iani-kuliiani-kuli

security-review

Trace data flow to identify exploitable vulnerabilities in code.

Community
Advanced