security-review

A security review validates authentication, secrets handling, and API endpoint configurations to prevent common vulnerabilities. This skill generates checklists and remediation steps for input validation, CSRF protection, and secure logging before code reaches production.

Check for secure secrets management by ensuring safe storage, rotation, and usage of credentials. During code review, this skill enforces requirements for secrets handling and safe error handling to prevent sensitive data exposure across services and infrastructure.

Create a pre-deployment security checklist by applying review patterns for input validation, rate limiting, and data integrity. This skill helps teams verify authentication checks and generate remediation plans for new features and infrastructure.

This security review skill works across code, services, and infrastructure to apply threat modeling and enforce rate limiting requirements. It generates guidance for secure logging and safe error handling during development and deployment phases.

The best way to review authorization checks and CSRF protection is to activate this skill during feature design or code review. It generates concise security checklists and remediation plans for API endpoints and data handling vulnerabilities.