security-review

To perform an API security review, run this Skill against your project to surface security gaps. It applies a comprehensive checklist covering input validation, rate limiting, SQL injection prevention, and proper logging to secure new endpoints.

When adding authentication, you need security checks for authorization, session handling, and CSRF safeguards. This Skill enforces best-practice patterns and verification items to ensure your authentication implementation handles user input and sensitive access securely.

Preventing secret leakage requires strict secret management checks. This Skill reviews your secret storage and handling practices against best-practice patterns, verifying that sensitive data is secured before deployment.

The best way to check for XSS protection and input validation vulnerabilities is applying a security review checklist. This Skill scans user input processing to identify gaps and recommended mitigations for injection and cross-site scripting threats.

Yes, you can use this security review checklist for payment handling and confidential features. It applies verification items specifically designed to review sensitive feature implementations, ensuring authorization and secure logging are correctly applied.

This security review does cover SQL injection prevention and rate limiting. It enforces a comprehensive security checklist that verifies input validation, API rate limiting, and dependency management to mitigate common web application vulnerabilities.