skills.rest
UnlimitedxIQ
UnlimitedxIQCOMMUNITY
Explore all skills by this author →
GitHub

security-review

Identifies and fixes security vulnerabilities in software codebases.

1|Updated Mar 24, 2026
Search Tags:#security#threat-modeling#api-security#code-review#secrets-management#secure-coding
One-click install
npx skills add https://github.com/UnlimitedxIQ/consulting-pro-skills-pack --skill security-review-unlimitedxiq
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/UnlimitedxIQ/consulting-pro-skills-pack/tree/main/skills/security-review
Command: npx skills add https://github.com/UnlimitedxIQ/consulting-pro-skills-pack --skill security-review-unlimitedxiq

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Software projects routinely accumulate security risks during development and integration. This skill provides a structured approach to identify and remediate vulnerabilities across authentication, input handling, secrets management, API endpoints, and payment features.

Core Features & Use Cases

  • Comprehensive security checklist covering secrets, input validation, authentication, authorization, and data handling.
  • Guidance for secure API design, payment flows, and third-party integrations.
  • Threat modeling, secure coding patterns, and pre-deployment security validation.

Quick Start

Review your codebase against the security checklist and integrate the recommended patterns into your development workflow.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I identify security vulnerabilities in my codebase?▼

Threat modeling analyzes your application architecture to identify potential security threats before deployment. It provides structured secure coding patterns and a validation checklist to protect authentication flows, API endpoints, and payment features from exploitation.

How do I secure API endpoints and payment features during development?▼

Secrets management is the process of securely handling credentials and sensitive data within your software projects. You validate your codebase against a security checklist to prevent hardcoded secrets and ensure proper data handling across your web and API services.

Does this security review approach work for both web and API services?▼

Yes, this security review approach works for both web and API services by providing a comprehensive checklist that addresses authentication, input handling, and third-party integrations. It guides secure deployment validation across diverse software project architectures.

What is the best way to perform a pre-deployment security validation?▼

This security review approach differs from basic code reviews by applying a comprehensive checklist focused on threat modeling, secure coding patterns, and vulnerability remediation. It targets specific risks in authentication, payment features, and API endpoints rather than general code quality.

Related Skills

Explore More Software Engineering Skills→
camgrimseccamgrimsec
3

Documentation Intelligence Agent

Analyze project documentation to validate and adjust vulnerability findings in GitHub repositories.

Community
Advanced
PalomigPalomig

deploy-ops

Manages web app production deployments, CI/CD pipelines, and operational tasks.

Community
Advanced
sevenbelowllcsevenbelowllc

senior-security

Automate threat modeling, security auditing, and penetration testing for applications.

Official
Advanced
BagelHoleBagelHole
46

dast-scanning

Perform DAST scans on web applications and APIs with OWASP ZAP.

Community
Intermediate