security-review

Automate security reviews of code changes to identify vulnerabilities.

Updated Aug 30, 2025
One-click install
npx skills add https://github.com/vonomarap/kanokna --skill security-review-vonomarap
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/vonomarap/kanokna/tree/main/.agents/skills/security-review
Command: npx skills add https://github.com/vonomarap/kanokna --skill security-review-vonomarap

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Security reviews are often manual, time-consuming, and prone to human error, leaving authentication, input handling, secrets management, and API surfaces vulnerable.

Core Features & Use Cases

  • Perform structured security reviews during code changes to detect insecure patterns.
  • Provide reusable security templates for authentication, authorization, and secret management.
  • Use during API design, payment features, and data handling to enforce secure defaults.

Quick Start

Review a feature branch for authentication, input validation, and secret handling vulnerabilities.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate security reviews for code changes?

Automating security reviews for code changes involves applying a structured checklist to detect insecure patterns in authentication, input validation, and secrets management. This process enforces secure defaults across backend services during feature development.

What is security by design in API endpoints and payment features?

Security by design in API endpoints and payment features means proactively enforcing structured patterns for access control, input validation, and secure logging. This approach detects vulnerabilities and prevents insecure patterns before code changes are merged.

How do I check for insecure secrets management patterns in my code?

Checking for insecure secrets management patterns requires reviewing code changes against established security templates. This identifies exposed credentials and enforces structured handling to ensure secret management vulnerabilities are detected during development.

Does automated code review work for authentication and access control vulnerabilities?

Automated code review effectively targets authentication and access control vulnerabilities by applying reusable security templates. It scans backend services to detect insecure patterns and ensure proper authorization mechanisms are enforced.

What is the best way to enforce input validation and secure logging in backend services?

The best way to enforce input validation and secure logging in backend services is applying a structured security checklist during code reviews. This detects vulnerabilities and ensures secure defaults are applied across API endpoints and data handling.