skills.rest
rahmatullahboss
rahmatullahbossCOMMUNITY
Explore all skills by this author →
GitHub

security-review

Evaluate code and configuration for security best practices and common vulnerabilities.

Updated Jan 4, 2026
Search Tags:#code review#best practices#security#vulnerability#security audit
One-click install
npx skills add https://github.com/rahmatullahboss/multi-store-saas --skill security-review-rahmatullahboss
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/rahmatullahboss/multi-store-saas/tree/main/.agents/skills/security-review
Command: npx skills add https://github.com/rahmatullahboss/multi-store-saas --skill security-review-rahmatullahboss

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps developers and teams verify that their code adheres to security best practices, reducing vulnerabilities in applications.

Core Features & Use Cases

  • Security Checklist Compliance: Guides users through essential security measures like secrets management, input validation, and SQL injection prevention.
  • Best Practice Documentation: Provides comprehensive patterns for authentication, authorization, XSS prevention, and more.
  • Use Case: When deploying a new API, run this Skill to review your code for security flaws such as hardcoded secrets and unvalidated user inputs.

Quick Start

Review the provided code snippets and documentation to identify security gaps and implement recommended safeguards.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review my code for security vulnerabilities and hardcoded secrets?▼

Code security audits evaluate your application logic against best practices for secure secrets handling, input validation, and SQL injection prevention to identify gaps and implement necessary safeguards.

What security best practices should I check before deploying a new API?▼

Before deploying a new API, verify security checklist compliance by checking for proper authentication, authorization, XSS prevention, and protection against unvalidated user inputs to keep your code resilient to attacks.

How does an automated security audit identify risks in application configuration?▼

A security audit identifies configuration risks by evaluating code and settings for adherence to security standards, targeting sensitive features to ensure compliance and resilience against common application attacks.

Can I use a security review checklist for development teams building sensitive features?▼

Yes, this security review checklist is suitable for development teams deploying sensitive features and APIs, ensuring code is evaluated against common vulnerabilities and compliant with security standards.

What is the best way to prevent SQL injection and XSS during code review?▼

The best way to prevent SQL injection and XSS during code review is to reference comprehensive best practice documentation and verify that input validation and secure pattern implementation are correctly applied.

Why does my code fail security audits due to unvalidated user inputs?▼

Code fails security audits due to unvalidated user inputs when it lacks proper input validation mechanisms, exposing applications to common vulnerabilities and failing compliance with secure coding best practices.

Related Skills

Explore More Software Engineering Skills→
TechyParkTechyPark

code-review

Review code for correctness, security vulnerabilities, performance issues, and best practices.

Community
Intermediate
devsepninedevsepnine
1

security-review

Identify and remediate security vulnerabilities in codebases across authentication, authorization, input validation, secret management, and API security domains.

Community
Advanced
xlelibertyxleliberty

security-pen-testing

Perform offensive security assessments with vulnerability scanning and penetration testing.

Community
Advanced
glinckerglincker
35

security-scanner

Scan source code for vulnerabilities, hardcoded secrets, and OWASP Top 10 issues.

Official
Intermediate