security-review

Identify security vulnerabilities and best-practice gaps in codebases.

1|Updated Mar 8, 2026
One-click install
npx skills add https://github.com/vinitgirdhar/GRID_ --skill security-review-vinitgirdhar
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/vinitgirdhar/GRID_/tree/main/.agent/.agents/skills/security-review
Command: npx skills add https://github.com/vinitgirdhar/GRID_ --skill security-review-vinitgirdhar

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill helps teams identify security vulnerabilities and enforce best-practice patterns across codebases, reducing risk and compliance gaps.

Core Features & Use Cases

  • Security checklist for authentication, input validation, secret management, API design, and data handling.
  • Concrete examples with verification steps and secure coding patterns.
  • Use Case: When integrating a new payment flow, apply this skill to audit risk surfaces and enforce secure defaults.

Quick Start

Run a security review on the new module to generate a compliance checklist.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a security review on my codebase to check for vulnerabilities?

Run a security review to identify vulnerabilities and best-practice gaps across your codebase. The process generates a compliance checklist covering authentication, authorization, input validation, and secrets management to enforce secure defaults.

What security checks should I perform when integrating a new payment flow?

Security checks for new payment flows should audit risk surfaces and enforce secure defaults. Apply a comprehensive checklist covering secrets management, input validation, SQL injection prevention, XSS, CSRF, rate limiting, and safe error handling.

How does code review identify vulnerabilities in API endpoint creation?

Code review identifies vulnerabilities in API endpoint creation by applying a security checklist that evaluates authentication, authorization, input handling, and rate limiting. This process enforces best-practice patterns and reduces compliance gaps.

Can I use this security checklist for secrets management and input validation across any software project?

Yes, the security checklist applies across software projects to evaluate secrets management and input validation. It satisfies comprehensive requirements including SQL injection prevention, XSS, CSRF, and safe error handling regardless of your specific tech stack.

What is the best way to prevent SQL injection and XSS during code review?

The best way to prevent SQL injection and XSS during code review is to apply a comprehensive security checklist. This verifies input validation, enforces secure coding patterns, and generates concrete verification steps for your codebase.

Why do I need rate limiting and safe error handling in my authentication implementation?

Rate limiting and safe error handling are needed in authentication implementations to reduce risk and compliance gaps. A security review identifies best-practice gaps and enforces secure defaults across these critical authentication surfaces.