skills.rest
SOLEROM
SOLEROMCOMMUNITY
Explore all skills by this author →
GitHub

security-review

Identify security vulnerabilities in codebases and configurations with a repeatable review process.

Updated Mar 25, 2026
Search Tags:#authorization#security#authentication#input-validation#threat-modeling#secrets-management#secure-coding
One-click install
npx skills add https://github.com/SOLEROM/cldlab --skill security-review-solerom
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/SOLEROM/cldlab/tree/main/ecc/ref_claude/.agents/skills/security-review
Command: npx skills add https://github.com/SOLEROM/cldlab --skill security-review-solerom

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Identify vulnerabilities in codebases and configurations, and provide a practical, repeatable security review process that helps teams ship safer software.

Core Features & Use Cases

  • Secrets management guidance and best practices for avoiding hard-coded credentials.
  • Input validation, data handling, and secure coding patterns to prevent common flaws.
  • Authentication, authorization, and session handling checks to enforce proper access control.
  • Protection against injection, XSS, CSRF, and other web-facing risks with concrete examples.
  • Comprehensive security testing guidance, pre-deployment checklists, and risk assessment workflows.
  • Use Case: Integrate this guide into CI pipelines to audit new features, review third-party integrations, and ensure compliance before release.

Quick Start

Run a full security review against your latest build to identify misconfigurations, insecure patterns, and exposure risks.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a security review on my codebase to identify vulnerabilities?▼

A security review identifies vulnerabilities in codebases and configurations by applying a repeatable process across authentication, input validation, and secrets management to ensure proper guardrails are tested before deployment.

What is the best way to check for insecure authentication and session handling in my code?▼

Checking insecure authentication involves reviewing session handling and access control patterns to enforce proper authorization and ensure guardrails are in place and tested.

How do I prevent hard-coded credentials and manage secrets in my application configuration?▼

Preventing hard-coded credentials requires applying secrets management guidance and best practices during your security review to identify and remove exposure risks in configurations.

How can I protect my web application against injection, XSS, and CSRF risks?▼

Protecting against web-facing risks involves applying input validation, data handling, and secure coding patterns with concrete examples to prevent common flaws like injection, XSS, and CSRF.

Can I integrate a security checklist into my CI pipeline to audit new features before release?▼

Yes, you can integrate this security review process into CI pipelines to audit new features, review third-party integrations, apply pre-deployment checklists, and ensure compliance before release.

Does this security review process cover threat modeling and risk assessment workflows?▼

Yes, the security review process includes comprehensive security testing guidance, pre-deployment checklists, and risk assessment workflows to identify misconfigurations and exposure risks.

Related Skills

Explore More Software Engineering Skills→
marcusagmmarcusagm
4

vulnerability-scanner

Scan codebases for dependency, secret, and configuration vulnerabilities.

Community
Advanced
AidenSbVevoAidenSbVevo
1

security-audit

Orchestrate static analysis, supply-chain risk, and configuration review with Semgrep and CodeQL.

Community
Advanced
LeoWSY-hashblueLeoWSY-hashblue
3

source-code-scanning

Scan source code for vulnerabilities, secrets, and dependency CVEs.

Community
Advanced
foutoucourfoutoucour

pentest-web

Simulate web penetration testing to identify security weaknesses in web applications.

Community
Advanced