skills.rest
TeamMagicOfConch
TeamMagicOfConchOFFICIAL
Explore all skills by this author →
WebsiteGitHub

security-review

Identify and remediate software security vulnerabilities using a comprehensive checklist.

Updated Jan 23, 2024
Search Tags:#authorization#security#authentication#vulnerability#review#input-validation#secrets-management
One-click install
npx skills add https://github.com/TeamMagicOfConch/conch --skill security-review-teammagicofconch
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/TeamMagicOfConch/conch/tree/main/.agents/skills/security-review
Command: npx skills add https://github.com/TeamMagicOfConch/conch --skill security-review-teammagicofconch

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Identify and remediate security vulnerabilities in software projects by applying a comprehensive set of best practices and checklists.

Core Features & Use Cases

  • Comprehensive security checklist covering authentication, authorization, input validation, secrets management, rate limiting, CSRF, XSS, SQL injection, and more.
  • Automated security testing guidance and pre-deployment checks
  • Step-by-step guidance for secure implementation across endpoints, data handling, and integrations

Quick Start

Run a security review on your new feature by applying the checklist to authentication, input handling, and secrets management.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check my code for security vulnerabilities before deployment?▼

Run a security review using a comprehensive checklist to identify and remediate vulnerabilities like SQL injection, XSS, and CSRF. It enforces requirements around input validation, secrets management, and authentication within pre-deployment checks.

What is the best way to prevent SQL injection and XSS in my API endpoints?▼

The best way to prevent SQL injection and XSS is applying a structured security checklist during endpoint creation. This process enforces strict input validation, data exposure controls, and secure authentication requirements before deployment.

How do I securely manage secrets and handle user input validation in my software project?▼

Securely manage secrets and validate user input by applying a comprehensive security checklist. This enforces structured requirements for secrets management and input validation, ensuring vulnerabilities are remediated during development.

Does this security review checklist cover authentication, authorization, and rate limiting?▼

Yes, the security review checklist explicitly covers authentication, authorization, and rate limiting. It applies structured requirements across these areas alongside data exposure controls and automated security testing to remediate vulnerabilities.

Can I use this security checklist for blockchain security and third-party service integrations?▼

Yes, you can use this security checklist for blockchain security and third-party service integrations. It enforces structured requirements for dependency security and integrations, applicable when processing payments or connecting external services.

Related Skills

Explore More Software Engineering Skills→
Chid0kChid0k

js-recon

Analyze JavaScript source code for security vulnerabilities and API endpoints.

Community
Advanced
brenordvbrenordv

security

Audit software systems for security vulnerabilities and regulatory compliance.

Community
Advanced
KylerDKylerD
14

Security Patterns

Guide web application security with secrets management, authentication, input validation, and dependency auditing.

Community
Intermediate
ammonsdammonsd

security-audit

Audit the ActivityTracking application for security vulnerabilities and generate a findings report.

Community
Advanced