skills.rest
PequiProject
PequiProjectOFFICIAL
Explore all skills by this author →
GitHub

security-review

Identify and mitigate security vulnerabilities across web and backend services.

2|Updated Apr 12, 2026
Search Tags:#security#authentication#input-validation#threat-modeling#api-security#secrets-management#secure-coding
One-click install
npx skills add https://github.com/PequiProject/pequi --skill security-review-pequiproject
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/PequiProject/pequi/tree/main/.agents/skills/security-review
Command: npx skills add https://github.com/PequiProject/pequi --skill security-review-pequiproject

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Security gaps in software development pose risks to users and organizations. This skill provides a structured approach to identify, prioritize, and remediate vulnerabilities across authentication, input handling, secrets management, API endpoints, and data handling.

Core Features & Use Cases

  • Comprehensive security checklist to guide code reviews, design reviews, and deployment checks.
  • Best-practice patterns for secrets management, input validation, access control, and secure API design.
  • Use Case: Integrate into CI/CD to gate merges with automated security checks and generate actionable remediation steps.

Quick Start

Validate a new or updated API by applying the security checklist and summarizing any findings in a compact report.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I identify and mitigate security vulnerabilities in my software projects?▼

To identify and mitigate security vulnerabilities, apply a structured security checklist to your codebase covering authentication, input handling, secrets management, API design, and data handling to generate actionable remediation steps.

What is the best way to perform a secure code review for API endpoints?▼

The best way to perform a secure code review for API endpoints is to validate new or updated APIs by applying a comprehensive security checklist and summarizing findings in a compact report.

How do I integrate security checks into my CI/CD pipeline to gate merges?▼

Integrate security checks into your CI/CD pipeline by applying structured security guidance and validation steps to gate merges with automated security checks and generate actionable remediation steps.

Does this security review approach cover both web and backend services?▼

Yes, this security review approach covers both web and backend services by providing best-practice patterns for secrets management, input validation, access control, and secure API design.

Can I use this to generate a security checklist for deployment checks?▼

Yes, you can use this to generate a comprehensive security checklist designed to guide code reviews, design reviews, and deployment checks across your software projects.

What specific security domains are covered by this threat modeling and review process?▼

This threat modeling and review process covers authentication, input validation, secrets management, API security, and secure data handling to help prioritize and remediate vulnerabilities.

Related Skills

Explore More Software Engineering Skills→
MacPhobosMacPhobos

Threat Modeling (STRIDE)

Create data flow diagrams, threat registers, and mitigation plans using STRIDE.

Community
Advanced
mahg-esmahg-es
3

cicd-quality

Design and enforce CI/CD quality gates for code, tests, security, build, E2E, and performance.

Official
Advanced
borgheiborghei
467

senior-security

Identify and mitigate security risks in software systems using expert security engineering practices.

Community
Advanced
bugrabilgebugrabilge
10

vulnerability-scanner

Detect security vulnerabilities in code, running apps, and dependencies.

Community
Advanced