security-review

Identify and mitigate security vulnerabilities in codebases and deployment configurations.

Updated Apr 4, 2026
One-click install
npx skills add https://github.com/mitul-bhatia/Vibes --skill security-review-mitul-bhatia
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/mitul-bhatia/Vibes/tree/main/.github/skills/security-review
Command: npx skills add https://github.com/mitul-bhatia/Vibes --skill security-review-mitul-bhatia

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Security is a foundational requirement across code, APIs, and deployments; this skill provides a structured approach to identify, prevent, and remediate vulnerabilities early in the software lifecycle.

Core Features & Use Cases

  • Comprehensive security checklist covering secrets management, input validation, authentication, authorization, and secure API design, and secure configuration.
  • Practical patterns, templates, and examples to apply security best practices during development, CI/CD, and cloud deployments.
  • Use Case: Integrate this skill into security reviews for new features to reduce risk before release.

Quick Start

Audit your current codebase and implement the top three recommendations from the checklist in your next feature.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I identify security vulnerabilities in my codebase before deployment?

To identify security vulnerabilities in your codebase, apply a structured security review checklist covering secrets management, input validation, authentication, authorization, and secure API design to mitigate risks before release.

What is the best way to implement threat modeling and access control for web applications?

Threat modeling and access control for web applications are implemented using structured checklists and actionable patterns that enforce authentication, authorization, and secure configuration best practices across your development lifecycle.

How do I set up secrets management and secret rotation for cloud deployments?

Set up secrets management and secret rotation for cloud deployments by applying structured security patterns and templates that enforce secure configuration and prevent unauthorized access to sensitive payment and API features.

Does this security review approach work for payment-sensitive API features?

Yes, this security review approach works for payment-sensitive API features by applying structured checklists for input validation, auth-authorization, and secure API design to mitigate vulnerabilities across web and cloud environments.

Can I integrate security best practices directly into my CI/CD pipeline?

You can integrate security best practices into your CI/CD pipeline using practical patterns and templates that enforce input validation, secrets management, and secure configuration during automated cloud deployments and feature releases.