security-review

Identify and remediate security vulnerabilities in software projects.

3|Updated Apr 18, 2026
One-click install
npx skills add https://github.com/nassimbf/ftitos-claude-code --skill security-review-nassimbf
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/nassimbf/ftitos-claude-code/tree/main/skills/security-review
Command: npx skills add https://github.com/nassimbf/ftitos-claude-code --skill security-review-nassimbf

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This security skill helps development teams identify, assess, and remediate vulnerabilities early by enforcing best-practice security patterns across the codebase and workflows.

Core Features & Use Cases

  • Comprehensive security checklists for secrets management, authentication, input validation, API security, and data handling.
  • Pattern-based guidance for secure coding, threat modeling, risk mitigation, and secure deployment practices.
  • Use Case: Apply during feature development, API changes, or when storing or transmitting sensitive data to ensure compliance with security standards.

Quick Start

Run a security review against new or updated code modules to identify vulnerabilities before deployment.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check my code for security vulnerabilities before deployment?

To check code for security vulnerabilities, run a security review against new or updated modules to enforce best-practice patterns for input validation, secrets handling, and API security before deployment.

What is threat modeling and how does it help identify vulnerabilities?

Threat modeling helps identify vulnerabilities by applying pattern-based guidance to assess, mitigate, and enforce secure coding practices across authentication, authorization, and data handling workflows.

How do I prevent SQL injection and XSS in my API endpoints?

Prevent SQL injection and XSS in API endpoints by applying enforced security patterns for input validation, secure data transmission, and API security during feature development and code review.

Does this security review cover authentication and secret management requirements?

Yes, this security review covers authentication and secret management by enforcing comprehensive checklists and best-practice patterns for storing, transmitting, and handling sensitive data securely.

Can I use this for secure logging and rate limiting implementation?

Yes, you can use this for secure logging and rate limiting implementation, as it satisfies security requirements and enforces best-practice patterns across development, review, and deployment workflows.

What's the best way to enforce CSRF protection during feature development?

The best way to enforce CSRF protection during feature development is to apply pattern-based security guidance and pre-deployment checklists to identify and remediate vulnerabilities early.