security-review

Review code for security vulnerabilities against authentication and input validation checklists.

Updated Aug 27, 2026

Search Tags:#code review #security #vulnerability #sql injection #xss #secure coding #audit

Ready to run

npx skills add https://github.com/toddbadams/SBFoundation --skill security-review-toddbadams

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/toddbadams/SBFoundation/tree/main/.claude/skills/security/security-review
Command: npx skills add https://github.com/toddbadams/SBFoundation --skill security-review-toddbadams

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps identify and mitigate security vulnerabilities in code, ensuring applications are robust against common attack vectors.

Core Features & Use Cases

Vulnerability Assessment: Reviews code against a comprehensive security checklist.
Pattern Detection: Flags common insecure code patterns like SQL injection, XSS, and hardcoded secrets.
Use Case: Before deploying a new feature, use this Skill to perform a security audit on the codebase to catch potential vulnerabilities early.

Quick Start

Use the security-review skill to audit the provided code for vulnerabilities.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I conduct a security code review to find vulnerabilities?▼

To conduct a security code review, analyze your code against a comprehensive checklist covering authentication, authorization, input validation, output encoding, cryptography, error handling, and logging to identify vulnerabilities.

What is the best way to detect SQL injection and XSS in my codebase?▼

The best way to detect SQL injection and XSS is to scan for specific insecure code patterns, checking input validation and output encoding mechanisms to ensure user data is properly sanitized before execution or rendering.

Can I audit my application for hardcoded secrets and insecure random number generation?▼

Yes, you can audit your application by flagging specific insecure code patterns such as hardcoded secrets and insecure random number generation, ensuring cryptographic functions use secure, unpredictable values.

When should I perform a secure coding audit before deployment?▼

You should perform a secure coding audit before deploying a new feature to catch potential vulnerabilities early, ensuring your application is robust against common attack vectors like injection and cross-site scripting.

Does a security vulnerability assessment check error handling and logging configurations?▼

Yes, a security vulnerability assessment checks error handling and logging configurations against a security checklist to prevent sensitive data leakage and ensure audit trails are properly maintained.