skills.rest
rongarede
rongaredeCOMMUNITY
Explore all skills by this author →
GitHub

security-review

Assess code and configuration for security vulnerabilities across backend services.

4|1|Updated Jan 19, 2026
Search Tags:#security#review#secrets#best-practices#input-validation#access-control#code-safety
One-click install
npx skills add https://github.com/rongarede/skill-snapshots --skill security-review-rongarede
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/rongarede/skill-snapshots/tree/main/development/security-review
Command: npx skills add https://github.com/rongarede/skill-snapshots --skill security-review-rongarede

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill ensures code changes meet security best practices, helping teams prevent vulnerabilities before they reach production.

Core Features & Use Cases

  • Comprehensive security checklist covering secrets management, input validation, authentication/authorization, data handling, and secure API design.
  • Practical guidance for secure coding patterns and configuration choices with real-world examples.
  • Use Case: Before merging a PR for a new API, run the security review to validate environment variables usage, input handling, logging practices, and access control.

Quick Start

Run a security review on a new API endpoint using the built-in checklist to verify secrets handling, input validation, and access control.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a security review on a new API endpoint before merging?▼

A security review for backend services enforces no hardcoded secrets, robust input validation, CSRF and rate-limiting controls, and principled access restrictions to identify vulnerabilities across authentication, authorization, and API endpoints.

What does a code security checklist cover for backend services?▼

A security review validates that no hardcoded secrets exist, input validation is robust, and access controls are properly configured before code changes reach production.

How do I check my code for hardcoded secrets and input validation issues?▼

Running a security review identifies hardcoded secrets and input validation vulnerabilities by enforcing environment variable usage and robust input handling patterns across backend services.

Can I use a security review to verify CSRF and rate-limiting controls?▼

The security review assessment enforces CSRF and rate-limiting controls alongside access restrictions to ensure API endpoint security across backend services.

When should I run a security assessment on my codebase?▼

Run a security assessment before merging a PR for a new API to ensure code changes meet security best practices and prevent vulnerabilities from reaching production.

Related Skills

Explore More Software Engineering Skills→
rortan134rortan134
26

find-bugs-diff

Identify bugs, security vulnerabilities, and code quality issues in source code changes.

Community
Advanced
ByronWilliamsCPAByronWilliamsCPA

Code Quality Skill

Validate Git workflows with conventional commits and repository health checks.

Official
Intermediate
anavvanzinanavvanzin

agency-api-tester

Automate API validation and testing across endpoints and CI/CD pipelines.

Community
Advanced
OWASPOWASP
141

secrets-scan

Detect hardcoded secrets in source code and configuration files.

Official
Intermediate