security-review

Generate security review checklists and remediation steps for authentication, secrets, and APIs.

6|Updated Mar 25, 2023

Search Tags:#security #authentication #validation #review #secrets #threat-modeling

Ready to run

npx skills add https://github.com/songkg7/dotfiles --skill security-review-songkg7

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/songkg7/dotfiles/tree/main/dot_claude/skills/security-review
Command: npx skills add https://github.com/songkg7/dotfiles --skill security-review-songkg7

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps teams perform comprehensive security reviews across authentication, secret management, API endpoints, and data flows to prevent common vulnerabilities before they reach production.

Core Features & Use Cases

Secrets & credential handling: guidance on safe storage, rotation, and secure usage of credentials.
Input validation & data integrity: checklists and patterns to validate user input and prevent injection or malformed data.
Security testing guidance: automated and manual testing patterns for authentication, authorization, and data handling, plus pre-deployment checklists.

Quick Start

Activate this skill during feature design or code review to generate a concise security checklist for a new API endpoint and a remediation plan.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I perform a security review for authentication and API endpoints?▼

A security review validates authentication, secrets handling, and API endpoint configurations to prevent common vulnerabilities. This skill generates checklists and remediation steps for input validation, CSRF protection, and secure logging before code reaches production.

What should I check for secure secrets management and credential rotation during code review?▼

Check for secure secrets management by ensuring safe storage, rotation, and usage of credentials. During code review, this skill enforces requirements for secrets handling and safe error handling to prevent sensitive data exposure across services and infrastructure.

How do I create a pre-deployment security checklist for data flows and input validation?▼

Create a pre-deployment security checklist by applying review patterns for input validation, rate limiting, and data integrity. This skill helps teams verify authentication checks and generate remediation plans for new features and infrastructure.

Does this security review skill work for threat modeling and rate limiting across infrastructure?▼

This security review skill works across code, services, and infrastructure to apply threat modeling and enforce rate limiting requirements. It generates guidance for secure logging and safe error handling during development and deployment phases.

What is the best way to review authorization checks and CSRF protection before production deployment?▼

The best way to review authorization checks and CSRF protection is to activate this skill during feature design or code review. It generates concise security checklists and remediation plans for API endpoints and data handling vulnerabilities.