security-review

Review software code against security best practices and vulnerability checklists.

Updated Aug 27, 2026
One-click install
npx skills add https://github.com/sasasayusuke/util --skill security-review-sasasayusuke
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/sasasayusuke/util/tree/main/pg/%E3%83%86%E3%83%97%E3%82%B7%E3%82%B9/.claude/skills/security-review
Command: npx skills add https://github.com/sasasayusuke/util --skill security-review-sasasayusuke

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill addresses the critical need for robust security in software development by providing a comprehensive checklist and best practices to prevent vulnerabilities.

Core Features & Use Cases

  • Security Best Practices: Offers detailed guidance on secrets management, input validation, SQL injection prevention, authentication, XSS, CSRF, rate limiting, and more.
  • Code Auditing: Helps developers identify and fix potential security flaws before deployment.
  • Use Case: Before deploying a new feature that handles user authentication and payment processing, use this Skill to ensure all security measures are correctly implemented according to industry standards.

Quick Start

Run a security review on the current codebase to identify potential vulnerabilities.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
What is included in a comprehensive security review checklist for software development?

A security review checklist includes authentication, input validation, secrets management, SQL injection prevention, XSS, CSRF, rate limiting, sensitive data exposure, blockchain security, and dependency management. It ensures code adheres to security standards and mitigates common vulnerabilities.

How do I audit my codebase for authentication and sensitive data exposure vulnerabilities?

To audit your codebase for sensitive data exposure and authentication vulnerabilities, run a comprehensive security review against best practices. This process identifies potential flaws in secrets management and ensures security measures are correctly implemented before deployment.

What's the best way to prevent SQL injection and XSS during code review?

The best way to prevent SQL injection and XSS during code review is to validate inputs and apply a comprehensive security checklist. This verifies that code adheres to security standards and mitigates common vulnerabilities before deployment.

Does this security review checklist cover rate limiting and CSRF protection?

Yes, this security review checklist explicitly covers rate limiting and CSRF protection. It provides detailed best practices for these areas alongside authentication, input validation, and secrets management to ensure robust software security.

Can I use this security review for blockchain applications and dependency management?

Yes, you can use this security review for blockchain applications and dependency management. The checklist explicitly addresses blockchain security and dependency management to ensure code adheres to industry security standards.

When do I need to run a security review on my code?

You need to run a security review before deploying new features that handle user authentication, payment processing, or sensitive data. This ensures all security measures are correctly implemented according to industry standards to protect your users.