security-review

Review software projects for security vulnerabilities using a structured checklist.

Updated Aug 27, 2026

Search Tags:#security #authentication #xss #review #input-validation #csrf #secrets-management

Ready to run

npx skills add https://github.com/spike-land-ai/spike.land --skill security-review-spike-land-ai

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/spike-land-ai/spike.land/tree/main/.github/skills/security-review
Command: npx skills add https://github.com/spike-land-ai/spike.land --skill security-review-spike-land-ai

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill ensures code follows security best practices and identifies potential vulnerabilities.

Core Features & Use Cases

Security checklist covering secrets management, input validation, SQL injection prevention, authentication & authorization, XSS, CSRF, rate limiting, data exposure, and dependency security.
Guardrails & patterns for pre-deployment and runtime security, with practical examples and remediation steps.
Use Case: Integrate into development workflows to audit new features, APIs, and third-party integrations for security issues.

Quick Start

Review the security checklist against your project and implement the recommended patterns.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I perform a security review for my web API to prevent SQL injection and XSS?▼

A security review for web APIs involves checking code against a structured checklist covering SQL injection prevention, input validation, and XSS protection. This process identifies potential vulnerabilities and provides practical remediation steps for authentication and data exposure.

What is the best way to manage secrets and prevent data exposure in software projects?▼

Secrets management prevents data exposure by ensuring sensitive keys and credentials are securely stored and never logged. A comprehensive security review provides guardrails and patterns for pre-deployment and runtime protection to mitigate these risks effectively.

Does this security checklist cover CSRF protection and rate limiting for web services?▼

Yes, this security checklist covers CSRF protection and rate limiting alongside authentication, secure logging, and dependency management. It provides structured steps to audit new features and third-party integrations for security issues across web services.

How do I check my authentication and authorization implementation for security vulnerabilities?▼

To check authentication and authorization implementations, apply a structured security checklist that evaluates access controls and session handling. This review identifies weaknesses in your security design and offers practical patterns to strengthen your pre-deployment defenses.

What steps should I follow to secure user input and prevent vulnerabilities before deployment?▼

To secure user input before deployment, follow a security checklist focusing on strict input validation and SQL injection prevention. This approach provides guardrails and practical examples to ensure your runtime environment remains protected against malicious data.