One-click install
npx skills add https://github.com/rednam-ntn/light-darkly --skill security-review-rednam-ntn
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security_review
Source: https://github.com/rednam-ntn/light-darkly/tree/main/.agents/skills/security-review
Command: npx skills add https://github.com/rednam-ntn/light-darkly --skill security-review-rednam-ntn

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill ensures your code adheres to robust security practices, proactively identifying and mitigating potential vulnerabilities before they can be exploited.

Core Features & Use Cases

  • Comprehensive Security Checklist: Covers secrets management, input validation, SQL injection prevention, authentication, XSS, CSRF, rate limiting, and more.
  • Best Practice Examples: Provides clear "Do This" vs. "Don't Do This" code examples for various security scenarios.
  • Use Case: Before deploying a new API endpoint that handles user data, use this Skill to run through the checklist and ensure all security best practices are implemented, from input validation to proper authentication.

Quick Start

Run a security review on the provided code snippet to identify potential vulnerabilities.

Frequently Asked Questions about security_review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
What security best practices should I check before deploying a new API endpoint?

Security best practices for new API endpoints include implementing input validation, SQL injection prevention, proper authentication, authorization, rate limiting, and secrets management to protect sensitive data from unauthorized exposure.

How do I prevent common web vulnerabilities like XSS and CSRF in my code?

To prevent XSS and CSRF vulnerabilities, follow secure coding standards that include input validation, output encoding, and anti-CSRF token implementation, guided by clear do-this versus don't-do-this security code examples.

How do I run a security review on a code snippet to identify vulnerabilities?

Run a security review on your code snippet by applying a comprehensive checklist covering secrets management, input validation, SQL injection prevention, and authentication to identify and mitigate potential vulnerabilities before deployment.

Does this security checklist cover blockchain security and dependency management?

Yes, the security checklist covers both blockchain security and dependency management, alongside critical areas like authentication, authorization, sensitive data exposure, and rate limiting to ensure comprehensive vulnerability mitigation.

What is the best way to manage secrets and prevent sensitive data exposure in software development?

The best way to manage secrets and prevent sensitive data exposure is by adhering to robust security practices and utilizing a comprehensive checklist that guides developers in implementing secure coding standards and testing methodologies.

Can I use this security review for authentication and authorization testing?

Yes, you can use this security review for authentication and authorization testing, as it provides best practice patterns and a comprehensive checklist specifically addressing these critical areas to fortify your code.