security-review

Identify code vulnerabilities and enforce security best practices during development.

Updated Jan 26, 2026
One-click install
npx skills add https://github.com/TwuanMinn/fadelab --skill security-review-twuanminn
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/TwuanMinn/fadelab/tree/main/.agent/skills/skills/cc-skill-security-review
Command: npx skills add https://github.com/TwuanMinn/fadelab --skill security-review-twuanminn

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

The Security Review Skill ensures code follows security best practices and identifies potential vulnerabilities throughout the development lifecycle.

Core Features & Use Cases

  • Comprehensive security checklist covering secrets management, input validation, authentication and authorization, CSRF protection, rate limiting, and secure logging.
  • Patterns and guidance for secure API design, data handling, and third-party integrations.
  • Use Case: When building a new authentication flow or API endpoint, apply these patterns to prevent common vulnerabilities and to verify compliance with security requirements.

Quick Start

Apply the security-review skill to authentication, input handling, secrets, and API endpoints to identify vulnerabilities and implement the recommended security patterns.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I ensure my code is secure from the start when building authentication flows?

To ensure secure code from the start, apply a comprehensive security checklist during authentication development that enforces best practices for authorization, CSRF protection, rate limiting, and secure logging. This identifies vulnerabilities early in the lifecycle.

What security best practices should I follow for API endpoint creation and input validation?

For secure API endpoint creation and input validation, follow established patterns for data handling and third-party integrations. A comprehensive security checklist helps enforce input validation and prevents common vulnerabilities during development.

How do I manage secrets securely in my application code?

Secure secrets management involves applying specific security patterns to identify vulnerabilities related to sensitive data. By enforcing best practices during development, you verify compliance with security requirements and prevent unauthorized access.

Does this security review approach work for payment feature implementation?

Yes, this security review approach applies directly to payment feature implementation. It provides best-practice patterns and testing guidance to identify vulnerabilities and verify compliance with strict security requirements for sensitive financial transactions.

What is the best way to test my application for common security vulnerabilities?

The best way to test for security vulnerabilities is to apply comprehensive security checklists and testing guidance during input handling and API design. This verifies compliance with security requirements and identifies potential weaknesses before deployment.

Why do I need a security checklist for my software engineering workflow?

You need a security checklist to systematically identify vulnerabilities and enforce best practices across authentication, input handling, and secrets management. It ensures code follows security requirements throughout the development lifecycle rather than reacting post-deployment.