security-review

Identify and mitigate security risks across authentication, input handling, secrets, API design, and payments.

Updated Mar 24, 2026

Search Tags:#security #authentication #compliance #input-validation #api-security #secrets-management

Ready to run

npx skills add https://github.com/Oruga420/claude-code-skills --skill security-review-oruga420

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/Oruga420/claude-code-skills/tree/main/security-review
Command: npx skills add https://github.com/Oruga420/claude-code-skills --skill security-review-oruga420

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill helps engineering teams design, review, and implement secure software by providing a comprehensive security checklist and practical patterns for authentication, input handling, secrets management, API design, and payments.

Core Features & Use Cases

Secrets management and encryption patterns
Authentication & authorization best practices
Input validation and data sanitization
API security and secure third-party integration
Pre-deployment security testing and risk assessment
Use Case: When adding a new API endpoint or authentication flow, apply the security review checklist to ensure compliance

Quick Start

Review the security checklist and apply the patterns to your codebase

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I implement secure authentication and input validation for a new API endpoint?▼

Secure API endpoint implementation requires applying comprehensive security patterns for authentication, input validation, and data sanitization. Use established security checklists to enforce safe integration and mitigate risks before deployment.

What are the best practices for secrets management and encryption in a codebase?▼

Secrets management best practices involve enforcing strict encryption patterns and secret protection across codebases and deployment pipelines. Apply established security guidelines to ensure sensitive data remains protected during pre-deployment validation.

How does a pre-deployment security review mitigate risks in third-party service integration?▼

Pre-deployment security review mitigates integration risks by enforcing a comprehensive security checklist for safe third-party service connections. It validates API design and assesses potential vulnerabilities before code reaches production.

Can I use this security review checklist for payment feature compliance and risk assessment?▼

Yes, the security review checklist explicitly covers payment features and risk assessment. It provides practical patterns to ensure payment integration complies with established security and authorization best practices.

What is the best way to enforce API security and authorization across deployment pipelines?▼

Enforcing API security across pipelines requires applying comprehensive authentication patterns and pre-deployment validation. Implement strict secrets management and input validation to ensure compliance and mitigate API design risks.

When should I perform a security risk assessment on my codebase?▼

Security risk assessment should be performed during pre-deployment validation and whenever adding new API endpoints or authentication flows. Apply the security checklist to identify and mitigate risks across input handling and API design.