skills.rest
officechbusinessservices-creator
officechbusinessservices-creatorCOMMUNITY
Explore all skills by this author →
GitHub

security-review

Audit codebases for security vulnerabilities and enforce secure coding patterns.

Updated Feb 4, 2026
Search Tags:#authorization#security#authentication#xss#input-validation#code-review#secrets-management
One-click install
npx skills add https://github.com/officechbusinessservices-creator/CompliCore --skill security-review-officechbusinessservices-creator
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/officechbusinessservices-creator/CompliCore/tree/main/.claude/skills/security-review
Command: npx skills add https://github.com/officechbusinessservices-creator/CompliCore --skill security-review-officechbusinessservices-creator

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Security governance for codebases by auditing for common vulnerabilities, secrets management pitfalls, and robust authentication/authorization patterns.

Core Features & Use Cases

  • Secrets management guidance: ensures secrets are sourced from env/config managers and never hardcoded.
  • Input validation guidance: enforces strict validation to prevent injections and malformed data.
  • Secure coding patterns: prescribes safe API design, error handling, and data handling practices.
  • Use Case: When shipping a new feature, run a security review to detect sensitive data exposure, insecure configurations, and weak access controls.

Quick Start

Review the new authentication module and verify secrets handling, input validation, and secure API patterns.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review my codebase for security vulnerabilities like XSS and SQL injection?▼

Review codebases for security vulnerabilities by enforcing strict input validation and best-practice patterns to mitigate SQL injection, XSS, and malformed data across web apps and services.

What is the best way to check if secrets are hardcoded in my application?▼

Checking for hardcoded secrets involves validating that secrets management sources sensitive data from environment variables or config managers, ensuring secrets are never hardcoded in the codebase.

How do I validate secure authentication and authorization patterns in my API design?▼

Validate secure authentication and authorization patterns by auditing API design for robust access controls, safe error handling, and secure data handling practices to prevent weak authentication vulnerabilities.

Can I use an automated security review for third-party integrations and CSRF protections?▼

Yes, you can use a security review to audit third-party integrations and enforce CSRF protections, ensuring external dependencies and API endpoints adhere to secure coding patterns and data handling practices.

When do I need to run a security audit on my web application before shipping a new feature?▼

Run a security audit before shipping new features to detect sensitive data exposure, insecure configurations, and weak access controls, ensuring robust authentication and input validation are in place.

Related Skills

Explore More Software Engineering Skills→
Junior-Frontend-devJunior-Frontend-dev

security-scan

Scan codebases for OWASP vulnerabilities and generate remediation plans.

Community
Intermediate
JFrangelJFrangel

security-guard

Detects and remediates security vulnerabilities in code, infrastructure, and architecture using OWASP and DevSecOps standards for pre-production environments.

Community
Advanced
NY1024NY1024
25

auditor-skill

Audit OpenClaw agent skills for security vulnerabilities and malicious behavior.

Community
Advanced
jassicsjassics
6

mobile-pentest

Automate MASTG-based mobile penetration tests on Android and iOS apps.

Community
Advanced