security-review

A comprehensive security review checklist covers secrets management, input validation, SQL injection prevention, authentication, authorization, XSS, CSRF, rate limiting, sensitive data exposure, and dependency management to mitigate vulnerabilities.

To prevent SQL injection and XSS vulnerabilities, follow secure coding patterns that enforce strict input validation and output encoding. This Skill provides clear 'Do This' vs. 'Never Do This' examples to guide implementation.

Yes, you can use this security review for API endpoints handling user data. It verifies that security best practices are followed, from input validation to proper authentication and authorization, before deployment.

Yes, this security checklist covers authentication and rate limiting. It addresses critical areas including authorization, secrets management, and sensitive data exposure to ensure robust protection against common threats.

The best way to secure code against data breaches is to run a comprehensive security review. This identifies potential vulnerabilities and guides developers in implementing secure coding patterns and testing methodologies.