security-review

Identify and mitigate security vulnerabilities in software applications using industry-standard checklists.

Updated Jul 8, 2026
One-click install
npx skills add https://github.com/nazrulsoftwaredev/NIT_CRM_2 --skill security-review-nazrulsoftwaredev
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/nazrulsoftwaredev/NIT_CRM_2/tree/main/.agents/.agents/skills/security-review
Command: npx skills add https://github.com/nazrulsoftwaredev/NIT_CRM_2 --skill security-review-nazrulsoftwaredev

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill addresses the critical need for proactive vulnerability management by providing a structured checklist to identify and mitigate security risks during the development lifecycle.

Core Features & Use Cases

  • Vulnerability Identification: Detects common security flaws such as hardcoded secrets, SQL injection risks, and XSS vulnerabilities.
  • Best Practice Enforcement: Provides standardized patterns for input validation, authentication, and rate limiting.
  • Use Case: Before deploying a new API endpoint, use this skill to verify that all user inputs are validated, secrets are managed via environment variables, and proper authorization checks are implemented.

Quick Start

Use the security-review skill to audit the current project directory for potential vulnerabilities and compliance with security best practices.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit my codebase for security vulnerabilities before deployment?

Security audits detect common flaws such as hardcoded secrets, SQL injection risks, and XSS vulnerabilities. This process provides standardized patterns for input validation, authentication, and rate limiting to verify that all user inputs are validated and proper authorization checks are implemented.

How does hardcoded secrets detection work in a security review?

Hardcoded secrets detection works by scanning the project directory to identify sensitive credentials embedded directly in the source code. It enforces managing secrets via environment variables and verifies that sensitive data handling complies with rigorous security best practices.

Can I use a security checklist to verify API endpoint authentication and authorization?

Yes, a security checklist verifies API endpoint authentication by enforcing rigorous verification steps for proper authorization checks. It ensures user inputs are validated, rate limiting is applied, and sensitive data handling meets industry-standard compliance before deploying new endpoints.

What is the best way to prevent SQL injection risks in database queries?

The best way to prevent SQL injection risks is by applying industry-standard coding patterns for input validation and database query verification. A security audit identifies these injection vulnerabilities and enforces standardized patterns to ensure production-grade security for all database queries.

Does a codebase security audit check for XSS vulnerabilities and input validation?

Yes, a codebase security audit checks for XSS vulnerabilities and input validation. It detects common security flaws including cross-site scripting risks and provides standardized patterns to verify that all user inputs are properly validated before deploying new API endpoints.