security-review

Review code against a security checklist covering injection, authentication, and secrets management.

Updated Aug 23, 2026
One-click install
npx skills add https://github.com/ninyawee/dotfiles --skill security-review-ninyawee
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/ninyawee/dotfiles/tree/main/dot_claude/skills/security-review
Command: npx skills add https://github.com/ninyawee/dotfiles --skill security-review-ninyawee

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill addresses the critical need for robust security in software development by providing a comprehensive checklist and actionable guidance to prevent vulnerabilities.

Core Features & Use Cases

  • Vulnerability Prevention: Identifies and mitigates risks related to secrets management, input validation, injection attacks (SQL, XSS, CSRF), authentication, authorization, and sensitive data exposure.
  • Best Practice Enforcement: Offers detailed code examples and verification steps for secure coding patterns across various technologies (e.g., TypeScript, Supabase, Solana).
  • Use Case: Before deploying a new feature that handles user sign-ups and payment processing, use this Skill to run through the security checklist, ensuring all sensitive data is handled correctly and common vulnerabilities are avoided.

Quick Start

Run the security review checklist for the new authentication module.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a security review on my authentication module?

Run a security review by applying a comprehensive checklist that covers secrets management, input validation, and authentication patterns. This process enforces secure coding practices and verifies that sensitive data is handled correctly to prevent common vulnerabilities.

What is the best way to prevent SQL injection and XSS in my code?

The best way to prevent SQL injection and XSS is to enforce strict input validation and apply secure coding patterns. A detailed security checklist provides actionable code examples and verification steps to mitigate these injection attacks across your development lifecycle.

Does this security checklist support TypeScript and Supabase?

Yes, the security checklist supports TypeScript and Supabase. It offers detailed code examples and verification steps for secure coding patterns across various technologies, including TypeScript, Supabase, and Solana blockchain environments.

How do I check for sensitive data exposure before deploying a new feature?

Check for sensitive data exposure by running through a security checklist before deployment. This review identifies risks related to data protection, rate limiting, and authorization, ensuring all sensitive user and payment information is handled correctly.

Can I use this for blockchain security and dependency management?

Yes, you can use this security review for blockchain security and dependency management. The checklist provides actionable patterns to mitigate vulnerabilities specific to Solana and enforces secure practices for managing project dependencies.