skills.rest
RambleRainbow
RambleRainbowCOMMUNITY
Explore all skills by this author →
GitHub

security-review

Identify and mitigate security vulnerabilities in application code and cloud infrastructure.

Updated May 9, 2026
Search Tags:#OWASP#security#authentication#input validation#code audit#vulnerability scanning#pre-deployment checklist
One-click install
npx skills add https://github.com/RambleRainbow/jd --skill security-review-ramblerainbow
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/RambleRainbow/jd/tree/main/.claude/skills/security-review
Command: npx skills add https://github.com/RambleRainbow/jd --skill security-review-ramblerainbow

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill eliminates the risk of undetected security vulnerabilities in code handling authentication, user input, secrets, API endpoints, payments, and sensitive data, which are common attack vectors leading to data breaches and platform compromise.

Core Features & Use Cases

  • Comprehensive Security Checklists: Covers secrets management, input validation, SQL injection prevention, authentication/authorization, XSS/CSRF protection, rate limiting, dependency security for web apps, plus cloud infrastructure and Solana blockchain security guidelines.
  • Pre-Deployment Validation: Provides a final checklist to ensure all security controls are implemented correctly before production deployment.
  • Use Case: When building a new user authentication API endpoint, use this Skill to verify secure token storage, proper authorization checks, and enabled rate limiting to prevent unauthorized access and abuse.

Quick Start

Use the security-review skill to audit the new payment processing feature for all required security controls before merging to main.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit application code for security vulnerabilities before deployment?▼

Pre-deployment security validation requires checking secure token storage, proper authorization checks, and enabled rate limiting for API endpoints. Applying OWASP-aligned secure code patterns ensures authentication mechanisms and sensitive data handling controls block unauthorized access and platform compromise.

What security controls do I need for a new payment processing feature?▼

Payment processing features require security controls for sensitive data handling, secrets management, and API endpoint protection. Auditing these features against industry compliance standards and secure code patterns prevents data breaches and ensures transaction integrity before merging to main.

Does this security review process cover cloud infrastructure and Solana blockchain integration?▼

The security review process covers cloud infrastructure and Solana blockchain integration alongside web application security. It provides security guidelines and pre-deployment validation steps aligned with cloud security standards to mitigate vulnerabilities in CI/CD pipelines and blockchain workflows.

How do I prevent SQL injection and XSS/CSRF vulnerabilities in web applications?▼

Preventing SQL injection and XSS/CSRF vulnerabilities involves applying comprehensive security checklists for input validation, authorization, and dependency security. Implementing secure code patterns and rate limiting during feature implementation mitigates these common attack vectors effectively.

When should I run a security audit during the development workflow?▼

Run a security audit during feature implementation, API endpoint creation, payment processing, and CI/CD pipeline configuration phases. Executing pre-deployment validation steps before merging to main ensures all security controls handle authentication and user input correctly to block vulnerabilities.

Related Skills

Explore More Software Engineering Skills→
KimjimanKimjiman

security-review

Review code for authentication, input validation, and secrets management vulnerabilities.

Community
Advanced
williamzujkowskiwilliamzujkowski
17

nist

Map systems to NIST controls and generate implementation plans.

Community
Advanced
pacphipacphi
6

security-testing

Identify and validate security vulnerabilities in software applications.

Community
Advanced
lamb92009lamb92009

security-reviewer

Identify vulnerabilities in code, configurations, and infrastructure with prioritized remediation guidance.

Community
Advanced