security-review

Identify and mitigate security risks in software projects per OWASP Top 10.

1|Updated Feb 3, 2026
One-click install
npx skills add https://github.com/trungtnm/claude-code-utils --skill security-review-trungtnm
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/trungtnm/claude-code-utils/tree/main/plugins/skills/security-review
Command: npx skills add https://github.com/trungtnm/claude-code-utils --skill security-review-trungtnm

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

The Security Review Skill ensures codebases follow security best practices and identifies potential vulnerabilities across authentication, input handling, secrets management, API design, and deployment configurations.

Core Features & Use Cases

  • Comprehensive security checklist for development, testing, and deployment.
  • Practical patterns for secrets management, input validation, authentication, authorization, and secure data handling.
  • Use Case: When implementing a new feature with user data, activate the security-review to verify secrets handling, input validation, and access controls.

Quick Start

Activate the security review to audit authentication, input validation, secrets usage, and API access patterns for your new feature.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit authentication and input validation for security vulnerabilities?

To audit authentication and input validation for security vulnerabilities, apply a security review using OWASP Top 10 best practices to verify access controls, checklists, and code patterns. This process identifies risks in user data handling and API integrations.

What is the best way to prevent secret leaks in CI/CD deployments?

The best way to prevent secret leaks in CI/CD deployments is to enforce secrets management best practices during security reviews. This provides concrete patterns for secure data handling and mitigates breach risks across deployment configurations.

Does this security review approach support automated checks for API access patterns?

Yes, this security review approach supports automated checks and guardrails for API access patterns. It enforces best practices per OWASP Top 10 and provides concrete code patterns to secure API design and integrations.

When do I need a comprehensive security checklist for software projects?

You need a comprehensive security checklist for software projects when implementing new features involving user data, integrating APIs, or configuring deployments. It verifies secrets handling, input validation, and authorization to prevent breaches.

How to harden code with security best practices for API integrations?

To harden code with security best practices for API integrations, activate a security review to audit authentication, input validation, and API access patterns. This enforces OWASP Top 10 guidelines and provides concrete checklists to prevent leaks.