security-review

Name: security-review
Availability: InStock
Author: phantian2026

Audit authentication, input handling, secrets, and API usage for security risks.

Updated Apr 28, 2026

Search Tags:#security #authentication #input-validation #risk-assessment #api-security #code-review #secrets-management

Ready to run

npx skills add https://github.com/phanTian2026/mobiletrading --skill security-review-phantian2026

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/phanTian2026/mobiletrading/tree/main/trae/skills/security-review
Command: npx skills add https://github.com/phanTian2026/mobiletrading --skill security-review-phantian2026

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Security review helps ensure code follows basic security practices and identifies common risk points during development, covering login/auth, user input, secrets, interfaces, and payment/sensitive data handling.

Core Features & Use Cases

Security checklist integration: applies during code reviews to verify secrets management, input validation, and secure API usage.
Threat modeling and remediation guidance: helps identify risks in authentication, authorization, data handling, and third-party integrations.
Concrete examples: includes patterns for avoiding hardcoded secrets, validating inputs, and protecting sensitive data in logs.

Quick Start

Run this security-review during a pull request to validate authentication, input handling, secrets, API usage, and payment/sensitive data handling.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I identify security risks in my codebase during a pull request?▼

Run a security review during a pull request to validate authentication, input handling, secrets, API usage, and payment features. It audits code against a comprehensive security checklist covering secrets management, input validation, and authorization.

What is the best way to audit authentication and authorization mechanisms in my code?▼

The best way to audit authentication and authorization is applying threat modeling and remediation guidance during code reviews. This helps identify risks in login flows, user input handling, and third-party integrations to ensure secure access controls.

How do I check for hardcoded secrets and validate inputs in my application?▼

Check for hardcoded secrets and validate inputs by applying concrete security patterns during code reviews. Verify secrets management and input validation against a comprehensive checklist to prevent sensitive data exposure in logs and APIs.

Does this security review process cover API endpoints and payment features?▼

Yes, the security review process covers API endpoints and payment features. It enforces secure API usage and validates sensitive data handling, applying threat modeling to identify risks in third-party integrations and payment processing flows.

Can I use this security checklist for ongoing development cycles and login flows?▼

You can use this security checklist for ongoing development cycles including login and auth flows. It enforces comprehensive checks covering secrets management, input validation, authentication, authorization, logging, and risk remediation.

When do I need a comprehensive security checklist for risk remediation?▼

You need a comprehensive security checklist for risk remediation when developing features involving user input, API endpoints, or sensitive data. It helps identify security risks in authentication, data handling, and third-party integrations early.