security-review

Assess code and configuration for security vulnerabilities across backend services.

4|1|Updated Jan 19, 2026

Search Tags:#security #review #secrets #best-practices #input-validation #access-control #code-safety

Ready to run

npx skills add https://github.com/rongarede/skill-snapshots --skill security-review-rongarede

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/rongarede/skill-snapshots/tree/main/development/security-review
Command: npx skills add https://github.com/rongarede/skill-snapshots --skill security-review-rongarede

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill ensures code changes meet security best practices, helping teams prevent vulnerabilities before they reach production.

Core Features & Use Cases

Comprehensive security checklist covering secrets management, input validation, authentication/authorization, data handling, and secure API design.
Practical guidance for secure coding patterns and configuration choices with real-world examples.
Use Case: Before merging a PR for a new API, run the security review to validate environment variables usage, input handling, logging practices, and access control.

Quick Start

Run a security review on a new API endpoint using the built-in checklist to verify secrets handling, input validation, and access control.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I perform a security review on a new API endpoint before merging?▼

A security review for backend services enforces no hardcoded secrets, robust input validation, CSRF and rate-limiting controls, and principled access restrictions to identify vulnerabilities across authentication, authorization, and API endpoints.

What does a code security checklist cover for backend services?▼

A security review validates that no hardcoded secrets exist, input validation is robust, and access controls are properly configured before code changes reach production.

How do I check my code for hardcoded secrets and input validation issues?▼

Running a security review identifies hardcoded secrets and input validation vulnerabilities by enforcing environment variable usage and robust input handling patterns across backend services.

Can I use a security review to verify CSRF and rate-limiting controls?▼

The security review assessment enforces CSRF and rate-limiting controls alongside access restrictions to ensure API endpoint security across backend services.

When should I run a security assessment on my codebase?▼

Run a security assessment before merging a PR for a new API to ensure code changes meet security best practices and prevent vulnerabilities from reaching production.