security-review

Review code for authentication, input handling, secrets, and API vulnerabilities.

Updated Mar 12, 2026
One-click install
npx skills add https://github.com/MuhamadAnang/wareflow-project --skill security-review-muhamadanang
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/MuhamadAnang/wareflow-project/tree/main/.agents/skills/security-review
Command: npx skills add https://github.com/MuhamadAnang/wareflow-project --skill security-review-muhamadanang

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps developers proactively identify and mitigate security vulnerabilities in their code, ensuring robust and safe application development.

Core Features & Use Cases

  • Comprehensive Security Checklist: Covers secrets management, input validation, SQL injection prevention, authentication, XSS, CSRF, rate limiting, and more.
  • Best Practice Guidance: Provides code examples and verification steps for secure coding patterns.
  • Use Case: Before deploying a new feature that handles user payments, activate this skill to ensure all sensitive data is handled securely, API endpoints are protected, and input is rigorously validated.

Quick Start

Use the security-review skill to check the code for any hardcoded secrets or potential SQL injection vulnerabilities.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
What is the best way to check my code for SQL injection and XSS vulnerabilities?

To check code for SQL injection and XSS vulnerabilities, use a comprehensive security review checklist that guides you through secure coding patterns and verification steps to proactively mitigate risks.

How do I ensure secrets management is secure before deploying an application?

To ensure secure secrets management before deploying an application, follow verification steps that scan for hardcoded secrets and apply secure data handling patterns. This prevents accidental exposure of sensitive credentials.

Does this security review checklist cover API endpoints and rate limiting?

Yes, this security review checklist covers API endpoints and rate limiting. It provides best practice guidance and verification steps specifically designed to protect sensitive data and secure your application's exposed routes.

How do I prevent CSRF and validate user input when creating authentication flows?

To prevent CSRF and validate user input during authentication implementation, apply the secure coding patterns and verification steps provided in a security review checklist to ensure robust and safe application development.

When do I need a comprehensive code review checklist for handling sensitive user data?

You need a comprehensive code review checklist for handling sensitive user data when developing features like user payments. It ensures API endpoints are protected, input is validated, and secrets are managed securely.