security-review

Name: security-review
Availability: InStock
Author: raphaelmans

Identify and remediate security vulnerabilities across code, APIs, and data flows.

Updated Feb 28, 2026

Search Tags:#authorization #security #authentication #input-validation #risk-assessment #secrets-management

Ready to run

npx skills add https://github.com/raphaelmans/agent-skills --skill security-review-raphaelmans

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/raphaelmans/agent-skills/tree/main/security-review
Command: npx skills add https://github.com/raphaelmans/agent-skills --skill security-review-raphaelmans

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill provides a structured security review to ensure authentication, input handling, secret management, and secure data handling across codebases, APIs, and integrations.

Core Features & Use Cases

Security checklist covering secrets management, input validation, authentication & authorization, data exposure, CSRF, rate limiting, and secure logging.
Guidance & patterns for implementing secure defaults, safe error handling, and vulnerability mitigation across modules.
Use Case: When introducing new features or APIs, run the checklist to identify misconfigurations and enforce secure coding practices early in development.

Quick Start

Review your new or existing project with this skill to ensure secrets are environment-based, inputs are validated, and sensitive data is never logged or exposed.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I run a security review for authentication and input validation vulnerabilities?▼

Run a security review using a formal checklist to identify and remediate vulnerabilities across authentication, authorization, and input validation. It guides teams through best practices with concrete verification steps and examples for safe data handling.

What is the best way to check my codebase for secrets management and data exposure risks?▼

Checking for secrets management and data exposure risks involves verifying that secrets are environment-based and ensuring sensitive data is never logged. A structured review enforces secure defaults and safe error handling across modules and APIs.

How do I prevent SQL injection, XSS, and CSRF when introducing new APIs?▼

Preventing SQL injection, XSS, and CSRF requires applying a security checklist to new APIs to identify misconfigurations early. The review provides concrete patterns and verification steps to enforce secure coding practices during development.

Does this security review cover rate limiting and secure logging configurations?▼

Yes, the security review covers rate limiting and secure logging configurations. It satisfies requirements for these areas alongside secrets handling and input validation, providing concrete verification steps to ensure sensitive data is never exposed.

Can I use this checklist for secure deployment and risk assessment scenarios?▼

Yes, you can use this checklist for secure deployment and risk assessment scenarios. It applies formal security reviews to data flows and integrations, guiding teams through vulnerability mitigation and secure defaults across the deployment pipeline.