security-review

Securing a new API endpoint requires a checklist covering authentication, authorization, input validation, and secrets management. This Skill provides a comprehensive checklist addressing SQL injection, XSS, and CSRF vulnerabilities to verify necessary precautions before deployment.

Reviewing code for SQL injection and XSS vulnerabilities involves checking input validation and applying secure coding patterns. This Skill offers best practice examples demonstrating how to identify and mitigate these common security threats to ensure code safety.

Best practices for authentication and authorization implementation focus on robust verification and access control. This Skill guides developers through secure patterns to ensure proper handling of user registration and data protection against common threats.

Yes, the security review checklist applies to general software development projects handling user data. It addresses dependency security, rate limiting, and secrets management without requiring specific platform dependencies or frameworks to function.

Secrets management prevents vulnerabilities by ensuring sensitive credentials are not exposed in code. This Skill includes secrets management in its comprehensive checklist to help developers mitigate risks and ensure code safety against unauthorized access.