security-review

Review application code against OWASP security checklists for vulnerabilities.

Updated Jan 30, 2026
One-click install
npx skills add https://github.com/ThejanaJayalath/Niolla-PM-system --skill security-review-thejanajayalath
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/ThejanaJayalath/Niolla-PM-system/tree/main/.cursor/.agents/skills/security-review
Command: npx skills add https://github.com/ThejanaJayalath/Niolla-PM-system --skill security-review-thejanajayalath

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill mitigates the risk of critical vulnerabilities by providing a structured, comprehensive security checklist for sensitive development tasks.

Core Features & Use Cases

  • Vulnerability Prevention: Guides developers through best practices for authentication, input validation, and secret management.
  • Compliance & Testing: Provides automated test patterns and pre-deployment checklists to ensure production-grade security.
  • Use Case: When implementing a new payment gateway or user authentication flow, use this skill to verify that your implementation follows OWASP standards and prevents common exploits like SQL injection or XSS.

Quick Start

Use the security-review skill to audit the current authentication module against the provided security checklist.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check my authentication implementation against OWASP standards?

Audit your authentication module against a comprehensive security checklist to verify OWASP compliance, ensuring secure token storage patterns and parameterized queries to prevent common vulnerabilities.

What is the best way to prevent SQL injection and XSS in new API endpoints?

Prevent SQL injection and XSS during API endpoint creation by enforcing input validation, parameterized queries, and strict adherence to OWASP security best-practice checklists for sensitive data handling.

How do I audit code for secret management and sensitive data handling vulnerabilities?

Conduct a comprehensive code review focusing on secret management and sensitive data handling to identify vulnerabilities, verifying that secure token storage patterns and compliance requirements are met.

Can I use a security checklist for pre-deployment compliance testing of payment gateways?

Yes, you can apply pre-deployment checklists and automated test patterns to verify production-grade security and compliance when implementing sensitive features like a new payment gateway.

Does this security review work for general production code or only specific modules?

This security review applies to general production code with specific focus on authentication implementation, API endpoint creation, secret management, and sensitive data handling tasks.

Why does my code review miss critical security vulnerabilities before deployment?

Code reviews miss critical vulnerabilities without a structured checklist, whereas applying comprehensive security audits ensures adherence to OWASP standards and mitigates risks like SQL injection.