skills.rest
Threat-Vector-Security
Threat-Vector-SecurityOFFICIAL
Explore all skills by this author →
WebsiteGitHub

Security Review Skill

Identify and remediate security vulnerabilities in codebases with a structured review workflow.

11|3|Updated Feb 24, 2026
Search Tags:#authentication#secrets#input-validation#security-review#code-security
One-click install
npx skills add https://github.com/Threat-Vector-Security/guardian-agent --skill security-review-skill-threat-vector-security
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: Security Review Skill
Source: https://github.com/Threat-Vector-Security/guardian-agent/tree/main/skills/cc-skill-security-review
Command: npx skills add https://github.com/Threat-Vector-Security/guardian-agent --skill security-review-skill-threat-vector-security

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill ensures all code follows security best practices and identifies potential vulnerabilities.

Core Features & Use Cases

  • Secrets management: Enforces avoiding hardcoded credentials and uses environment variables or vaults.
  • Input validation: Validates user input with strict schemas to prevent injection and corrupt data.
  • Access control & governance: Applies authentication and authorization checks on critical operations, with policy-driven guardrails.

Quick Start

Use the security review skill to scan a codebase for security weaknesses and generate remediation steps.

Frequently Asked Questions about Security Review Skill

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate a security review for my codebase?▼

Validate user input using strict schemas to prevent injection attacks and corrupt data. A structured security review enforces input validation checks across API endpoints and services to block malicious payloads before processing.

How do I check my code for hardcoded credentials and secrets?▼

Check for hardcoded credentials by enforcing secrets management policies that require environment variables or vaults. A security review scans the codebase to identify embedded secrets and generates remediation steps to move them into secure storage.

Can I apply authentication and authorization checks to API endpoints during a security review?▼

Yes, you can apply authentication and authorization checks to API endpoints. A security review assesses access control and governance across critical operations, applying policy-driven guardrails to ensure proper authorization is enforced.

What's the best way to find security vulnerabilities in third-party integrations?▼

Find security vulnerabilities in third-party integrations by applying a comprehensive security-review checklist. This process evaluates data handling and integration points across services and deployments, generating verifiable verification steps for remediation.

Does a code security review work for both services and API deployments?▼

Yes, a code security review works for services and API deployments. It applies a structured workflow across authentication, input validation, and data handling to identify vulnerabilities and enforce best practices throughout the deployment pipeline.

Related Skills

Explore More Software Engineering Skills→
dakshrawat298-gifdakshrawat298-gif

security-burpsuite-project-parser

Parse Burp Suite XML exports to extract and deduplicate security findings.

Community
Intermediate
xlelibertyxleliberty

senior-fullstack

Generate fullstack project boilerplate and analyze code quality for security, complexity, and dependency health.

Community
Advanced
zcheezchee
1

security-review

Audit codebases for vulnerabilities, secrets, and dependency issues.

Community
Advanced
Logos-LiberLogos-Liber
17

vulnerability-scanning

Identifies security vulnerabilities in code, dependencies, and container images.

Official
Advanced